Please visit www.hammerfistclan.com - you are currently viewing archived forums.

Due to the continual forum screw ups by our hosts over at forumotion.com we're moving to more secure forums. We own our new forums, hosted on our own server. Never again will rely on the incompetence of others when it comes to our community! Please visit this thread here: http://hammerfistclan.com/forum/showthread.php?t=21829

    Ack Part 2

    Share
    avatar
    Severnie
    Wobbly Poster
    Wobbly Poster

    Male
    Number of posts : 58
    Age : 38
    Exerience Points : 86250
    Registration date : 2008-05-14

    Ack Part 2

    Post by Severnie on Thu Jun 05, 2008 10:20 am

    Well I can almost confirm that it is in fact the auto UI updater that is the virus, because I have it now too! This has been the only "new "program I have downloaded and allowed to run on my computer. Although I did not have any problems for a few days, just recently I had the same problems as Taltos.

    First thing I noticed was that opening any program seemed to take much longer than before and sometimes they would not even open at all. Next thing that happened was I was not able to get on to the interent. Then, finally when I tried to go to a restore point, the PC would not allow me see the restor interface. The restore tool was running as it showed in the processes, but I was not able to see it or access it.

    I rebooted the computer in safe mode and was fortunatly able to navigate to the restore points options and get a restore point put in to well before I downloaded the ui. Unfortunatly I do not know if this has done the trick. I can access the internet (for now), but opening some programs still seem to hang. But what I noticed most differently about my computer than before is that on my meter that shows how much chip power and ram I am using, the chip power is now constantly hovering between 2-5% where as before it was always at 0%. Plus my RAM usage seems to be a few percent higher than normal.

    So I checked running processes and there is this file listed under SYSTEM and the description is "NT Kernel & System" which is constantly running and using that 2-5% chip usage. Now I cannot verify that this was not here in the past, but if it was, it certainly was not using up the resources it is using now. When I right click on it and try to open the folder its from, or see what it is attached to, or even try to close it, nothing happens at all, as if I didnt attempt anything.

    A quick search online tells me that an ntkernel.exe can be a trojan.

    Perhaps I am being paranoid I dont know, but thats why I am looking for some guidance from the guru's here. This computer is only about a month old, had some smart tech guys from the IT and Systems Integration Department from my last job location build it for I switched locations. It has been superb and flawless up to this point and has never acted this way before.

    What do you guys think?
    avatar
    Severnie
    Wobbly Poster
    Wobbly Poster

    Male
    Number of posts : 58
    Age : 38
    Exerience Points : 86250
    Registration date : 2008-05-14

    Re: Ack Part 2

    Post by Severnie on Thu Jun 05, 2008 1:01 pm

    As an update - the computer just blue screened at random and restarted. This has only happened once and I hope its only coincidental.
    avatar
    Bullarky
    Forum Imperial
    Forum Imperial

    Male
    Number of posts : 934
    Location : WPB, FL

    <img src="http://illiweb.com/fa/pbucket.gif">
    <img src="http://illiweb.com/fa/pbucket.gif" TITLE="Forum Camper for the month of April, May - 2008"> <img src="http://illiweb.com/fa/pbucket.gif" TITLE="Frequent Commentator"> <img src="http://illiweb.com/fa/pbucket.gif" TITLE="4 months or more as a member"> <img src="http://illiweb.com/fa/pbucket.gif" TITLE="Founding Member of a Hammerfist MMO">
    Hammerfist games :
    AOC - Retired
    WAR - Retired
    LotRO - Smashing Goblins and Orcs as we speak!
    Exerience Points : 87103
    Registration date : 2008-04-16


    Character sheet
    Forum Class: Lurker!
    Health:
    21/42  (21/42)
    Mana:
    32/42  (32/42)

    Re: Ack Part 2

    Post by Bullarky on Thu Jun 05, 2008 1:02 pm

    Did you download this from Curse? If so, has anyone else complained about this happening to their computer (on the Curse forums)?
    avatar
    Liathan
    Pee Wee Poster
    Pee Wee Poster

    Male
    Number of posts : 37
    Location : Andover, MN
    Exerience Points : 86100
    Registration date : 2008-05-20

    Re: Ack Part 2

    Post by Liathan on Thu Jun 05, 2008 1:13 pm

    is your antivirus picking the kernal up at all?
    avatar
    Severnie
    Wobbly Poster
    Wobbly Poster

    Male
    Number of posts : 58
    Age : 38
    Exerience Points : 86250
    Registration date : 2008-05-14

    Re: Ack Part 2

    Post by Severnie on Thu Jun 05, 2008 3:21 pm

    I did download it from curse and unfortunatly the only thing I have that can be considered "anti-virus" is Windows Defender. It did not pick it up on a scan.
    avatar
    Liathan
    Pee Wee Poster
    Pee Wee Poster

    Male
    Number of posts : 37
    Location : Andover, MN
    Exerience Points : 86100
    Registration date : 2008-05-20

    Re: Ack Part 2

    Post by Liathan on Thu Jun 05, 2008 3:45 pm

    you could try DLing avast and see what it has to say.

    Wolfbreath
    Little Poster
    Little Poster

    Female
    Number of posts : 72
    Location : Connecticut, USA
    Exerience Points : 86050
    Registration date : 2008-05-22

    ACK part 2

    Post by Wolfbreath on Thu Jun 05, 2008 8:22 pm

    AVG has a free virus checker that's supposed to be good (I use their priced one and it is definately good). Google it under AVG Internet Security for the download.

    Also if you have XP, I checked my processes while idle here browsing and there was no "NT" anything or anything "kernel" listed. 99% of my CPU was in System Idle ... others all at 0%. So that NT Kernel thingie sounds suspicious.

    Sponsored content

    Re: Ack Part 2

    Post by Sponsored content


      Current date/time is Tue Oct 24, 2017 3:30 am