Toolkit

Story: Cleaning up after the MSBlast worm

Posted by: FREAKED THE HECK OUT (Monday 29 March 2004, 9:04 AM)

I didn't have the MSBLAST worm--but something very similiar---and even more destructive.
I was having major computer problems--the blue face of death out of nowhere, malicious programs suddenly popping up--trying to entice me to click on them, a huge decrease in my getting any emails, a huge increase in my receiving a bunch of spam mails with filthy re: headings, computer freezing up, and finally the pointer of my mouse scrolling up or down the side of the screen all on it's own.
This had been going on for about eight months---and had gotten worse. I run Windows XP HOME ----on a Dell----and access dial up to get online. And of course I was running the latest version of Norton and always let it update itself.
My friend ranted on SPYBOT SEARCH AND DESTROY & I downloaded it---can't beat the price--it's free----and it opened up my eyes on my major virus/trojan farm I had going on.
I had codebase memory leaks---called XMLID.EXPLOIT which is all backdoor evilness.
I also had somekind of SMAILBOX EXE. , a virus file called 'App/Gator-A' that was located in my C:/proga~1/Blubster/FSG_40~1.EXE....and a TROJAN.DOWNLOAD.REVIRD.html....
Abd these programs would be in one location then all of a sudden jump to another location.
My computer crashed so hard--I couldn't restart it. Trying to talk to Dell techhelp is like pouring tobasco sauce in my eyeballs---cause they barely speak any English I could understand--nor did they know what to do to help me.
I learned how to replace my hard drive all on my own. And for being a female and never having experience doing this---I had to pat myself on the back.
Within a week of installing my new hard drive---my problems were rearing their vicious heads again. My registry settings kept changing---I had no control over my own computer all over again.
Bought hard drive #2---hooked it up---two days later---back to square one.
Installed hard drive #3---immediately downloaded the sixty critical updates--and since I'm dial up---it must have taken over a week. I purchased TREND MICRO SECURITY PC-CILLIN PROTECTION that my cop friend ranted and raved about---and even had excellent reviews online---and installed it.
It also installed a firewall for added port protection. Geeze---since when did we dial up people need to worry about firewall protection?
Not only did this blasphemous software make my system crash but these boxes kept popping up asking me which ports I would allow access.
Huh??????
I kept clicking on NO NO NO NO NO.
More and more boxes. I clicked on ok--enable one time--and now I've had nightmares of backdoor programs all over again. It's like they never left---or if they did--they know so much personal info on me--they no matter what I do or replace--they can easily hack themselves back into my computer.
All of my registry settings have been changed---I'm not even the administrator on my own computer this week, I constantly have these ports "listening" to mine, keylogging---yada yada yada.
Is this the end? Have they won?
Yes they have, haven't they?