I wonder if anyone on here would be able to help me with a wee problem?

I have just been infected with and had to get rid of Sasser.worm and another worm called Nachi!.worm or something like that.

I've managed to delete and get rid of them, but now I've found a new entry in my Run registry called C:/Windows/System 32/skynetave.exe

I don't 'think' that this is a virus, or harmful as I have searched for skynetave.exe and skynetave on Google and found nothing. BUT when I go into Task Manager, there are literally dozens of processes running called skynetave.exe and when I try and terminate them, they just start-up again. I think it must be slowing my computer down.

I was going to delete all the registry entries for this I can find and see if that helps. But if it is a virus, then it's probably copied and renamed itself to somewhere else on my HD. So I just wanted to check if anyone has come by this before or knows anything about it?

Thanks in advance.

Format, everytime I had something like that or got infected with a worm I had to format

I'd rather not have to Format! Sod that! lol

Must be a way around it without resorting to something that drastic :( .

sounds suspiciously like spy-ware. You might try ad-aware, it is free, and does a reasonable job of clearing out spy-ware. There is another good free one, but I can't remember it for some reason. Must be Monday morning! :coffee:

Don't think it was spyware, as I have Ad-Aware 6.0 updated and it didn't pick it up.

I just searched for all traces of it on my comp and deleted them, then cleaned my registry of any entries. Hopefully it's sorted!

BTW: Watch out for Sasser! Windows XP systems are shutting down allover the place!

The regular procedure:

1) Get a virus-scanner
2) Get a malware-scanner (Like this (http://in.yahoo.com/*http://www.spybot-updates.com/files/spybotsd13rc3.exe) one -hot-link)
3) Get a better browser (Suggestion (http://www.mozilla.com) )
4) Get a firewall (One example. (http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?lid=zadb_zadown) )
#)(Get a new OS, system, and burn the old comp, but you can skip this part if you like)
5) Update everything / Scan

There, trouble-free computer. Standard procedure in all comp-stores; get yours today. :p

(...Could as well copy/paste that next time...)

[ May 03, 2004, 22:18: Message edited by: Virne ]

Windows XP has a built in firewall you can use

Whether or not it's actually better or worse than having no firewall I don't know, but it's free and already installed. I don't have access to a windows PC but from what I remember using it just involves clicking one check box for most users (it's not very configurable though)

Failing that you could always use linux ;)

The WinXP firewall is better than nothing, but it's still no replacement for Norton Personal Firewall or ZoneAlarm Pro.

i just managed to fight off a vicious attack by a 40th level epic worm/trojan.

despite the fact that i kept firing such 9th level spells as Spyboy S&D, CWShredder and HijackThis, the bastard kept rolling natural 20's and making his saving throws!

in the end, i had to use an artifact called boot winXP into Safe Mode and use my secret weapon, an Epic spell called "Ad-Aware 6.0" - so i blew the filthy hellspawn away and I became champion of the realm! i then used my new powers to banish the insidious internet explorer for 100 years, and decided to make Fort Mozilla my new stronghold, so a worm/trojan shall never take me unawares again... or so, the kingdom hopes.

It is the Sasser worm.

Zonelabs skynetave.exe page (http://download.zonelabs.com/bin/free/securityAlert/11.html)