Author Topic: Quicktime is giving me messages about the blaster worm?!  (Read 4966 times)

0 Members and 1 Guest are viewing this topic.

alexthegreat

  • Guest
Quicktime is giving me messages about the blaster worm?!
« on: June 25, 2008, 04:26:27 AM »
I don't think is a infection.  But I downloaded a video of a site (owned by onnuetral about the blaster worm the format is .avi.  I like there videos because they show real time demos of different malware.  The thing is it would only play the music, not the video.   So I tried opening it with quicktime.  The header said blaster worm, but I was watching a video called In action... zlob trojan!!!  Does anyone think I'm infected?  I did a memory scan (not a complete doing it now) and no infections were spotted.
Do you think this is an infection?

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #1 on: June 25, 2008, 07:01:34 AM »
Here is a video of it:

I uploaded it myself.

http://www.youtube.com/watch?v=04hIAXDB1AM

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #2 on: June 25, 2008, 09:38:40 AM »
I don't think the video is to balme, but the 100% CPU usage is suspicious.

Have you tried a reboot?

Have you tried a boot time scan with avast!

If still having problems, post a HijackThis! log.
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #3 on: June 25, 2008, 07:46:56 PM »
I tried to open other videos, and we'll I didn't have the problem.
I do find it suspicious, I will do a boot time scan.
If nothing is found, I will follow your other steps.

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #4 on: June 25, 2008, 09:47:13 PM »
A boot time scan found nothing... a weird thing happened though, my computer stopped making noise and the monitor didn't show anything.  I noticed my power buton was blinking tellign me the computer was hibernating and I had to press the button.  So I  went and pressed it... but the monitor stopped recieving a signal, 10 min later (I think it was still scanning) and my computer made alot of noise and vista started up it was weird.  I posted my hijackthis log with this post.

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #5 on: June 25, 2008, 11:32:30 PM »
Try using MSConfig to disable all but essential startup items: if your computer runs normally, you'll know one of the startup items is causing a problem.

http://www.netsquirrel.com/msconfig/msconfig_vista.html
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #6 on: June 25, 2008, 11:36:32 PM »
Actually, I forgot, that my computer doesn't recieve mouse signals, while in BIOS or booting up.  and since I can't move the mouse it went into hibernation. 

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #7 on: June 25, 2008, 11:41:06 PM »
I also forgot, (...I'm losing my marbles)  it could not scan one file I can't remeber the full message but it said C:/Program Files/Scansoft/omni-pages...
could not be opened because it's CHM is corrupt

That was not word by word it said... that's all I remember do you think I should use blacklight rootkit revealer?

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #9 on: June 26, 2008, 12:04:45 AM »
I checked my network usage every so often through the Task Manager, I got no suspicous network usage.

I'm still waiting for the Blacklight scan to finish.

So what do you think... Do you think I got some malware?  or just some weird things going on?

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #10 on: June 26, 2008, 12:18:44 AM »
I'm using Blacklight and well... nothing was dected?! there has to be, Windows comes with rootkits to protect some files... I'm going to rescan with it as admin (which I forgot to do *slaps myself*)

I'm using Windows Vista SP1 Home Premium

Here are the list of programs I scanned with:

Avast! Normal + Archive Files -Nothing
Avast! Boot time scan + Archive Files -Nothing
SUPERantispyware (complete scan) Nothing (never had a tracking cookies for ages)
MBAM (Complete Scan) Zip zero
F-Secure BlackLight -Zero.
Trying another Blacklight scan...
« Last Edit: June 26, 2008, 12:23:36 AM by nerd0795 »

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #11 on: June 26, 2008, 12:30:53 AM »
I did another scan... No rootkits... What the **** is going on with my computer?!  Also every so often e recovery (built into my acer aspire computer) agent pops up when I start and the last option is in Japanese?  Anyone know what's going on I really need help I don't have an install disk because Acer didn't give me one and not even a restore disk  :o :o :o
« Last Edit: June 26, 2008, 04:04:42 AM by nerd0795 »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #12 on: June 26, 2008, 02:39:34 PM »
I don't have an install disk because Acer didn't give me one and not even a restore disk  :o :o :o
Acer, HP... some other manufacturers, does not give the original CD but only the ability of creating the restore disks, not even the disk themselves, but the ability of creating them... it's not what I've said it's a good thing.

Did you try the general cleaning procedure?

1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.
The best things in life are free.

alexthegreat

  • Guest
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #13 on: June 26, 2008, 07:46:39 PM »
Quote
Acer, HP... some other manufacturers, does not give the original CD but only the ability of creating the restore disks, not even the disk themselves, but the ability of creating them... it's not what I've said it's a good thing.

I did make a factory default... but I don't know if it's a repair cd, or a restore disk.

Quote
1. Disable System Restore and reenable it after step 3.
I didn't do it, because I never found any infections.
Quote
2. Clean your temporary files.
Yes
Quote
3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
Done, no infections found.
Quote
4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
Scanned with SAS and MBAM no infections, not even a tracking cookie.
Quote
5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
Used Blacklight, no hidden objects, files, processes found.
Quote
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
Done, No harmful entries found.
Quote
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
Already did a few months back.
Quote
8. Check if you have insecure applications with Secunia Software Inspector.
No...

Is there any other steps I can do?  Or do you think I'm clean?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Quicktime is giving me messages about the blaster worm?!
« Reply #14 on: June 27, 2008, 01:12:56 AM »
I did make a factory default... but I don't know if it's a repair cd, or a restore disk.
I think it's a restore disk (generally).

Is there any other steps I can do?  Or do you think I'm clean?
Full computer on-line scanning:
Kaspersky (very good detection rates)
ESET NOD32
Trendmicro housecall
F-Secure
BitDefender (free removal of the malware)
The best things in life are free.