PDA

View Full Version : New Virus? Please Respond.



ThreeTima
2008-08-06, 23:50
Um... I tried looking all over for this.. My Friend has a problem with her computer and I've been trying to help her. Her Computer has suddenly restart and then a black screen, upon reboot. Sometimes it will say that she needs to put in her "WinXP Disk" and then it tells her that it is not a valid CD (Which it is). The Only thing that all "Boots" have in common is that when she booted up OneCare, it was found, other programs she ran, could not find it. I was not able to verify what file it was, but I did get the Virus Name. The following "Virus" cannot be detected by any known Virus Scan or Bot Analyzer (Save Microsoft OneCare). I found only 1 reference to this in the whole search-able web. And since I didn't get any USEFUL, I turned to the only site I know with decent knowledgeable people.

The Virus, supposedly, is the Win32/siapag.a Virus. Supposedly a Trojan.

As I said earlier, I found a referance on at http://virscan.org/report/210cb223b431ce9b36459b96abb3486c.html, and it said that someone had found it on their lsass.exe (Windows Login Program). I scanned mine, because I was wondering if it was a false positive (something in the programing of the file that might raise a few flags, but not harmful), or if something was wrong. I had NO Virus in my file.

Here is my Report on the same file (from my computer), ran 10 minutes before I wrote this.
http://virscan.org/report/c517512546297bbc29110ee0dff031ee.html

As people that work with Virus' all the time, I would think you might have more resources to find out what this may be, and if it can be, and if so, how, to be removed.

Thanks a Million.

ThreeTima
2008-08-07, 00:07
Oh, and I would like to add, This is reoccurring.. she's reformatted (completely) as well as "Zeroed" her heard drive. After re-install, she would load her Virus Scan, and Spybot S&D. and an Online game that we play. I know it cannot be the game, because I have the same game, and have NO Such Problems.

tashi
2008-08-07, 01:06
Hello,


Oh, and I would like to add, This is reoccurring.. she's reformatted (completely) as well as "Zeroed" her heard drive. After re-install, she would load her Virus Scan, and Spybot S&D. and an Online game that we play. I know it cannot be the game, because I have the same game, and have NO Such Problems.

As the machine was reformatted, then the infection is being reloaded from somewhere.

Previous topic: http://forums.spybot.info/showthread.php?t=29422

If a helper manages to offer assistance in this busy forum please do respond, thanks.

Please see the stickied procedure: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Start a new topic providing the HJT log only, and a link to this thread which I have closed as helpers look for threads without a response.

Regards.