« previous next »
Pages: [1]   Go Down

Author Topic: What virus is this?  (Read 5074 times)

0 Members and 1 Guest are viewing this topic.

crameshcbe

  • Guest
What virus is this?
« on: August 31, 2005, 06:45:43 AM »
we are facing a big problem, any virus scanner couldn't find that. we have tried panda, nortom, eScan, mcCaffee, AntiVir and so on. now we have tried EZ Antivirus. this one also cann't find that.

our problem is
   we are a small 10 member developement team. we are using vb, vb.net, sql server 7.0, sql server 2000.

in sql sometimes some tables are automatically dropped, sometimes database is getting dropped, sometimes tables getting truncated, sometimes values are getting changed, sometimes sql server is getting stoped in all systems at the same time.

sometimes so much files and folders are getting deleted, sometimes .vbp files are getting deleted, sometimes it deletes only working files, sometimes it leaves working files and deletes all from that drive.

at the same time as i said that we are a developement team, we distribute our software to more than 50 clients, our clients are not facing this problem, thank god for that, it hapens only in our office.

we have asked about this to my friends, but they said "some one is doing physically", pls understand it not done by person really

can u help us, pls
Logged

Offline TedNelly

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1538
  • Trust No-One!
Re: What virus is this?
« Reply #1 on: August 31, 2005, 07:01:47 AM »


have you dismissed and employee lately??
Logged
Windows 10 Pro | Intel I7 CPU | 16 Gig 2133 RAM | Avast beta 17.5.2295 | Firefox 54 b9(64-bit) | Cyberfox 52.1 | T-Bird 52.1.1 | SpyWareBlaster 5.5 | MalwareBytes 3.0.0.865 | WinPatrol 35.5.2 | GlassWire 1.2.100 | Cybereason Ransomfree 2.2.7 |  Pulla-dePlug Final!

crameshcbe

  • Guest
Re: What virus is this?
« Reply #2 on: August 31, 2005, 07:11:46 AM »
no
Logged

Offline TedNelly

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1538
  • Trust No-One!
Re: What virus is this?
« Reply #3 on: August 31, 2005, 07:23:01 AM »
Sorry I am at a loss it really looks to me like someone external to you company has access to your system



« Last Edit: August 31, 2005, 07:29:16 AM by P3t3rb0nn »
Logged
Windows 10 Pro | Intel I7 CPU | 16 Gig 2133 RAM | Avast beta 17.5.2295 | Firefox 54 b9(64-bit) | Cyberfox 52.1 | T-Bird 52.1.1 | SpyWareBlaster 5.5 | MalwareBytes 3.0.0.865 | WinPatrol 35.5.2 | GlassWire 1.2.100 | Cybereason Ransomfree 2.2.7 |  Pulla-dePlug Final!

crameshcbe

  • Guest
Re: What virus is this?
« Reply #4 on: August 31, 2005, 07:27:45 AM »
but no one is doing that, i am sure.
Logged

Offline TedNelly

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1538
  • Trust No-One!
Re: What virus is this?
« Reply #5 on: August 31, 2005, 07:29:29 AM »


You could try running another online scanner Trend Micro is a very good one

Trend Micro House Call
Logged
Windows 10 Pro | Intel I7 CPU | 16 Gig 2133 RAM | Avast beta 17.5.2295 | Firefox 54 b9(64-bit) | Cyberfox 52.1 | T-Bird 52.1.1 | SpyWareBlaster 5.5 | MalwareBytes 3.0.0.865 | WinPatrol 35.5.2 | GlassWire 1.2.100 | Cybereason Ransomfree 2.2.7 |  Pulla-dePlug Final!

crameshcbe

  • Guest
Re: What virus is this?
« Reply #6 on: August 31, 2005, 07:33:22 AM »
i have already tried this one, no use
Logged

Offline TedNelly

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1538
  • Trust No-One!
Re: What virus is this?
« Reply #7 on: August 31, 2005, 07:38:48 AM »

Sorry crameshcbe I am at a loss some other members may offer some other advice

Have you run any rootkit revealing software?

Rootkit Revealer

« Last Edit: August 31, 2005, 07:46:02 AM by P3t3rb0nn »
Logged
Windows 10 Pro | Intel I7 CPU | 16 Gig 2133 RAM | Avast beta 17.5.2295 | Firefox 54 b9(64-bit) | Cyberfox 52.1 | T-Bird 52.1.1 | SpyWareBlaster 5.5 | MalwareBytes 3.0.0.865 | WinPatrol 35.5.2 | GlassWire 1.2.100 | Cybereason Ransomfree 2.2.7 |  Pulla-dePlug Final!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33903
  • malware fighter
Re: What virus is this?
« Reply #8 on: August 31, 2005, 09:40:48 AM »
Hi crameshcbe,

Always keep a backup of the original corrupted file.
The best way is to keep your code under version control, look for a tool like SGL Compare at http://www.red-gate.com   and download and run this:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.removal.tool.html

greets,

polonus
« Last Edit: August 31, 2005, 11:29:22 AM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »