🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.comp.hardware.overclocking.amd
Article #336

NEED HELP VERY BADLY!! Scan this message first!!

#336
From: Karel
Date: Fri, 20 Aug 1999 00:00
142 lines
8471 bytes
Dear all of you,

I got affected by a virus that's slowly invading my entire disk.

Symptoms:

1)when writing in Word,Notepad/Editpad,in fact in virtually every window
you're typing in,the cursor moves on different intervals to other places
in the text and unknown spaces also occur.This makes typing very
difficult while the text you write starts several times on other places
within the text.Frequently the cursor also goes to other places like for
instance right at this moment while I'm typing I suddenly notice I'm
typing in the subject box instead of the messagebody.
2)"Blikkering and flikkering" of the boxes you can click on witch starts
a few seconds after opening a program.This doesn't stop anymore and you
can only exit the program by using several times CTRL+Alt+Del.
3)In webpages,after a fewseconds,the page starts to move and shake(some
or all parts of it)and it scrolls up and down at a tremendous speed
continuously;clicking on a link becomes impossible,the slidebar goes up
and down.The only way to quit your browser is again by using
CTRL+Alt+Del for a few times.
4)All kind of nittering sounds occur(whoeps now my cursor runs a way
making empty lines and this messages is growing bigger and bigger...
Ok,I'm back after rebooting(managed to save this message in another
folder(took me some time though)
5)The sreen suddenly becomes like a kind of a messed up screensaver -->
(again back after rebooting,cursor took his own life again and runned
for its life like crazy making these empty phrases).You'll have to
reboot.
5)some other weird stuff like when typing a word and than hit shift
makes the word go a line beneath.It comes back in the right place when
you type the next word.
6)some other different nasty unexplainable things at reboot and in
programs,...to hard to explain never had those things before so it's
difficult to describe.


How I possibly got it?

1)I downloaded some days ago the file SHS17.ZIP when I was visiting the
page 'Infinisource-The Internet's Premier Resource center' at:
http://www.windows-help.net/index.html
There was a link on this page
to:http://hp.vector.co.jp/authors/VA004958/over115K/index_e.html -->
that's the URL where I downloaded it from.The purpose of this program is
to increase your modemspeed(regular modemconnection,not for
cablemodems)from (for me) 9600 baut rate to 921600 or less(115200 for my
modem).The program checks itself for your modemcompatibility and sets
the right baut rate if your modem is a compatible class(but this is
first checked by the SHS17 program;if your modem is     not a can
didate for this speed-upgrade the program will tell you so and will
quit.No harm done...(?).Now the problem is that I've send this program
to some of you already.I just hope you didn't run it yet.Otherwise and
when experiencing the same symptoms I do,well all I can say is:"I'm
realy realy sorry,I truly didn't know.InfiniSource is thaught of to be
very reliable...
2)Or,I got infected by an incoming Icq URL-message from someone I didn't
know.This happened 3 times this afternoon (witch usually never
happens).I went to take a short peep to this URL(went to the page).It's
curious that 3 different people send me this URL within short
intervals.They may have hacked/nuked me(really don't know what it is
that's happening)since you can read my IP-address in my personal
Icq-info.Most of those programs that hack or send whatever to damage
your system is based on this IP address.Disabling it so that it wouldn't
be viewable by unknown people with malicious intentions won't help.They
just look it up by a spooky program that also can tell the status of the
Icq member(he might be online while he has set himself in invisible
mode).It gives them all the info as to your address they need.
3)Or I got onto a webpage that contained hidden virusimplementations or
components.
4)The    re is     something wrong w                        ith my
keyboard(see this exa    mple?It's doing tha    t the whole time.I have
to                 correct so that it becomes rea    dable enough.
It's that I had troubles with my keyboard after pressing to maney
buttons at a time when the system frooze.After that incidence I had this
non-stopping beeping noice(but every program worked just perfectly only
these loud beepings).Luckily I had another 'cherry keyboard' witch
solved the noice problem.
5)I really wouldn't know...

How to get rid of it?

Well,since I had no virusscanner running in the background my
antivirusprogram(TBAV,'Thunderbite')might already be affected also.So I
didn't find a way to get rid of the virus(yet?);If this is all about
some virus anyway...I'll might have to try to run Norton or McaFee
virusutilities from the CD-rom and not yet install it...worth giving it
a try...All other system error-finders like eg. Dr. Watson or Scandisk
say there is no problem what so ever.I also scanned for troyan
virusses(Cleaner19C v. 1.9.0.37)but here also the same problem...the
program might already have been affected also.There is nothing to be
found that's not working properly in the controlpanel -->
systemmanager --> devices.
So if anyone of you has any other suggestions(rather not telling me to
go and buy better antivirussoftware;I want to find out what's really
happening first before going to pay for it.Neither do advice me to bring
in my PC at a dealer or any other computing store(damn! cursor is doing
weird again writing all the time in to the CC-box or subject-box...and
it went just fine till now(...besides the jumping of the cursor while
writing all this and splitting phrases leaving blank spaces as in the
example shown above).
My advice to you:don't accept/go to URL's received by Icq from people
that are not in your addressbook and rather do not install
SHS17(although it works really great as to the modemspeed-for me that
is- :faxing goes as twice as fast without any dataloss-don't know about
surfing;I'm a cablemodem-user).Also,better leave a good antivriusprogram
always running in the background...

Question...

At booting(witch I've never done so many times today as in my entire
life)the system occasionally stops for some sec's saying(in
DOS-language):
C:\>Rem TShoot: C:\UNZIPPED\SHS17\SHSMOD.EXE B H
C:\>C:\WINDOWS\SHS17\SHSMOD.EXE B H
shsmod V1.7a(29-AUGUST-1998)
SMC37C669 at 03f0h detected
PORT1(03f8h) Serial Speed Mode:HIGH
PORT2(02f8h) Serial Speed Mode:HIGH

--> Someone knows a bit more about MSDOS then I do and can explain this
in normal language?I've looked in the specified UNZIPPED folder though
it's emty.I'll try,if I get so far to go into Windowsfolder to look a
bit around there...but I think I won't be able to get there since the
symptoms I described above also mostly occur when trying so.

I hope you're not affected as well and for myself that someone knows
these symptoms and can tell me what I can do the best to get out of this
misery.

BTW,I run Win98 on a AMD-K6-2/350 co-pocessor,memory:128MB,disc:Award
Modular BIOS v4.51PG,clonenr:
07/15/1998-VP3-586B-8669-2A5LES2AC-00

P.S.:I just noticed that when I hit the left keybordbutton to make a
majustcule(arrow-buuton that points to the top of your board) makes my
cursor go out of this message box and let ii write in the CC- or
Subjectbox.This does not occur when I use the one on the right side of
the keyboard.

Greetz and a nice weekend to all of you!
Karel.
Technical Details
Message-ID: <E9lv3.2331$Gm6.60448@news.chello.be>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fcd68,c6386732b0ab7007,start
X-Google-Attributes: gidfcd68,public
X-Google-Thread: faad6,c6386732b0ab7007,start
X-Google-Attributes: gidfaad6,public
X-Google-Thread: 102579,c6386732b0ab7007,start
X-Google-Attributes: gid102579,public
X-Google-Thread: 151df1,c6386732b0ab7007,start
X-Google-Attributes: gid151df1,public
From: "Karel" <mb10961@tvd.be>
Subject: NEED HELP VERY BADLY!! Scan this message first!!
Date: 1999/08/20
Message-ID: <E9lv3.2331$Gm6.60448@news.chello.be>
X-Deja-AN: 515299248
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
X-Complaints-To: abuse@tvd.be
X-Trace: news.chello.be 935190244 195.162.221.16 (Sat, 21 Aug 1999 01:04:04 MET DST)
Organization: Chello Usenet Service
X-MSMail-Priority: Normal
NNTP-Posting-Date: Sat, 21 Aug 1999 01:04:04 MET DST
Newsgroups: alt.comp.hardware.overclocking.amd,alt.comp.virus,fj.comp.dev.keyboard,peru.help.hardware