Since I live in a box, I need help on a strange issue. I assumed a firewall (ZoneAlarm) would protect me from the worm.

I got a DSL connection which is always up, directly connected (no router) to my PC (I've only got one). win2k I also used NAV.

My computer have been acting like I got the worm:

1. svchost.exe failure

2. unexpected reboots

3. cut function in MS Word locks up system

etc etc

But I don't have the f****** worm.exe, cause

1. ZoneAlarm stopped the tftp from connecting to the outside.

2. I don't have any not know .services running under taskman

3. There is no msblast.exe when I look in the registy under ..current\run

4. No files on the hd contains the string "billy why do you make this possible...."

Help me please, is it possible that I got hit on port 135 while the zonealarm was loading during the startup, so it wasn't active?

My computer is still acting strange, I think it's gonna reboot in a little whil.....

cheers

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/6689/21440#21440