Virus??

[Roy]

Hi all,
I recently connected up My Windows XP machine to a wireless network in
the home. I connect to another computer in the same house. I have Sygate
personal firewall running as well as Norton Antivirus 2003. I also use
Spybot Search & Destroy & Ad-Aware.

My problems started within one day. My computer wanted access to:
www.kimo.com.tw
www.gemtek.co.tw
www.yahoo.com

Also my firewall kept on shutting down with a message similar to:
SMC.EXE
Instruction at "0x5e55e99" referenced memory at "0xf7458878" the memory
could not be found.

I ran Norton which told me I had a virus called "w32.gobot.a" but could not
delete it. I followed their on-line instructions on how to remove it. I
run it again in safe mode scanned & it found nothing. I also looked in the
registry for the keys it told me to delete but there was nothing found. I
have now removed the networking drivers for the Linksys USB thingy &
unplugged it, but the firewall still asks if I want to allow:

IPv6 driver (tcpip6.sys) has received a packet from the remote machine. And
at times wants to send a packet.
My other computer is shut down. Also this computer is slower & seems to
take longer to access web pages.
Can anyone explain some of the things happening here or suggest what I
should do next. Oh I have ran HijackThis & have posted it to another
newsgroup for their support.

I look forward to any suggestions as I'm now desperate!
Regards,
Roy.

 

[Jules]

Hi all,
I recently connected up My Windows XP machine to a wireless network in
the home. I connect to another computer in the same house. I have Sygate
personal firewall running as well as Norton Antivirus 2003. I also use
Spybot Search & Destroy & Ad-Aware.

My problems started within one day. My computer wanted access to:
www.kimo.com.tw
www.gemtek.co.tw
www.yahoo.com

Also my firewall kept on shutting down with a message similar to:
SMC.EXE
Instruction at "0x5e55e99" referenced memory at "0xf7458878" the memory
could not be found.

I ran Norton which told me I had a virus called "w32.gobot.a" but could
not
delete it. I followed their on-line instructions on how to remove it. I
run it again in safe mode scanned & it found nothing. I also looked in
the
registry for the keys it told me to delete but there was nothing found.
I
have now removed the networking drivers for the Linksys USB thingy &
unplugged it, but the firewall still asks if I want to allow:

IPv6 driver (tcpip6.sys) has received a packet from the remote machine.
And
at times wants to send a packet.
My other computer is shut down. Also this computer is slower & seems to
take longer to access web pages.
Can anyone explain some of the things happening here or suggest what I
should do next. Oh I have ran HijackThis & have posted it to another
newsgroup for their support.

I look forward to any suggestions as I'm now desperate!
Regards,
Roy.

Hi Roy,
I would recommend updating your norton again and then running the scan in
safe mode again.
Or perhaps dwnloading another Virus Scanner I shall give you a link for one
which I recommend
http://www.misec.net/trojanhunter.jsp
If programs are still trying to gain access to and from your machine without
your permission I would recommend looking into detail of your sygate
security log and looking at the IP Adresses on there. Perhaps put your
security level up higher in sygate or maybe install another firewall until
you have this problem resolved.
I did a search on > IPv6 driver (tcpip6.sys) and found nothing alarming and
nothing you do not already know. I am pretty sure the Trojan Hunter will
take care of it.
Perhaps if you can send me your HijackThis log.
Thank You
Jules

 

[Roy]

Thanks Jules I have mailed the log to you.

Regards,
Roy

Hi all,
I recently connected up My Windows XP machine to a wireless network in
the home. I connect to another computer in the same house. I have Sygate
personal firewall running as well as Norton Antivirus 2003. I also use
Spybot Search & Destroy & Ad-Aware.

My problems started within one day. My computer wanted access to:
www.kimo.com.tw
www.gemtek.co.tw
www.yahoo.com

Also my firewall kept on shutting down with a message similar to:
SMC.EXE
Instruction at "0x5e55e99" referenced memory at "0xf7458878" the memory
could not be found.

I ran Norton which told me I had a virus called "w32.gobot.a" but could
not
delete it. I followed their on-line instructions on how to remove it. I
run it again in safe mode scanned & it found nothing. I also looked in
the
registry for the keys it told me to delete but there was nothing found.
I
have now removed the networking drivers for the Linksys USB thingy &
unplugged it, but the firewall still asks if I want to allow:

IPv6 driver (tcpip6.sys) has received a packet from the remote machine.
And
at times wants to send a packet.
My other computer is shut down. Also this computer is slower & seems to
take longer to access web pages.
Can anyone explain some of the things happening here or suggest what I
should do next. Oh I have ran HijackThis & have posted it to another
newsgroup for their support.

I look forward to any suggestions as I'm now desperate!
Regards,
Roy.

Hi Roy,
I would recommend updating your norton again and then running the scan in
safe mode again.
Or perhaps dwnloading another Virus Scanner I shall give you a link for one
which I recommend
http://www.misec.net/trojanhunter.jsp
If programs are still trying to gain access to and from your machine without
your permission I would recommend looking into detail of your sygate
security log and looking at the IP Adresses on there. Perhaps put your
security level up higher in sygate or maybe install another firewall until
you have this problem resolved.
I did a search on > IPv6 driver (tcpip6.sys) and found nothing alarming and
nothing you do not already know. I am pretty sure the Trojan Hunter will
take care of it.
Perhaps if you can send me your HijackThis log.
Thank You
Jules