A NEW problem that NO ONE KNOWS ABOUT!!! HELP!!!!! - Page 2

bass1702 · 10-09-2009, 06:58 PM

Quote:

Originally Posted by Osiris

What program are you using to scan for spyware with? Do you know how to read hijackthis log?

I use a multitude of Programs. Including HiJackThis. And Yes I know how to read the log. lol.

Quote:

Originally Posted by Mak213

Are you sure it isnt Confiker?

After extensive scans using multiple different programs including Anti-Virus, all logs and reports did not show any security threats, infestations, or anything out of the ordinary. Computers are clean and free of Virus's, Malware and Spyware.

Quote:

Originally Posted by BonzNumber1

are the computers randomly restarting aswell like once per day or locking up compleetly for like 30 sec intervals?

They are not restarting.

On the 7th, at around 9-10am, the computers showed the signs and symptoms described in my first post

on the 8th, at around 11am-12pm, all computers returned to normal---as if nothing ever happened. No event log entries, no Security Log entries, Nothing reported on the firewall reports, virus scan complete and clean, hijackthis showed nothing out of the ordinary.

The computers (in no way linked) all went down at the same exact time, and returned to normal at the exact same time. with no footprints, no recollection of it ever happening.

No further symptoms. Computers are fine now.

kmote · 10-09-2009, 07:11 PM

It almost certainly was a virus or malware of some kind (or maybe an automatic software update gone awry). It has all the signs and symptoms of malware and since there is nothing connecting the PCs that really limits the explanations.

patonb · 10-09-2009, 07:19 PM

So sounds like a botnet type activity...

Good old DOS attack type attack for a day on some poor sap.

I'd try a rootkit scanner, as i don't think most AVs find them.

Mak213 · 10-09-2009, 08:28 PM

You do realize that the whole purpose of Confiker was to bypass scans right? That is why there was special applications made to scan for this specific infection alone. It gets past all known virus, spyware and other applications scans which makes it that good.

Conficker Information

I would try some of those scans as well. Just because normal virus scans come up clean doesnt mean that this infection was detected.

Hampton · 10-09-2009, 11:10 PM

Think of it logically.. A rootkit or Trojan would do exactly that and can be caught from any advertisement or maybe even an app update.. Antivirus apps do not find Trojans, they're not made for that and most Antivirus out there get smoked/bypassed by a good virus.

Ddestruction · 10-10-2009, 12:47 AM

Ok so all the high level tech dudes got there say at this.
Now time for the noob to start thinking

Even though Im probuly way off.

If all systems are affected the same way at the same time they must be connected in some way correct?

They all have either Windows XP to Windows Vista, so opperating system is out for an update gone wrong with XP wouldnt be the same for Vista. They share the same ISP but arent connected in anyway, dont they have to eventually be connected to some device to share the same Isp? Unless you have a separate modum for each of these PC's

Are all of these computers in the same room that you know all of them had this happened at the same time? Are they connected to a server or some kind of mainframe?

Is there at least one program/one website that all these PC's have installed/visted?

MikeFuryXP · 10-10-2009, 01:22 AM

Here is what I suggest:

Try 2 PC's at a time, try to atleast get some video footage of whats going on.

Try a different ISP if you have one, or try different modems.

Keep an eye on windows xp and windows vista, when or before the problem begins do a system restore point, what I mean is expect the unexpected from this little killer.

Last before you do anything, unhook from the internet and start backing up your files!

Hampton · 10-10-2009, 03:24 AM

Well it could be that all those machines were all running the same app.. like say "JoeSmith AntiVirus" and that was their once a month scan that bogged down those machines.. but that sounds like your symptoms.. a series of machines being scanned pretty heavily.

Nubbleet · 10-10-2009, 04:02 AM

I agree it seems like botnet type of activity. Go with what Mak said to make sure it isn't conficker.

patonb · 10-10-2009, 10:30 AM

Quote:

Originally Posted by Hampton

Well it could be that all those machines were all running the same app.. like say "JoeSmith AntiVirus" and that was their once a month scan that bogged down those machines.. but that sounds like your symptoms.. a series of machines being scanned pretty heavily.

If it was only a scan, it would run for hour, maybe 2 as it scanned, but it was 25hrs.. thats definately not a virus scan..

Member Login