* has stopped working.

Should I do anything else now?

Should I do anything else now?

If this is 3 days or older I sugguest putting this topic in the waiting room.

I thought putting it in the waiting room, had to be no posts. Just not resolved?

Edited by ForeColor, 05 May 2008 - 12:25 AM.

Draw error? Most of the problems I see says, "fault module ntdll.dll"

Ok, my computer says it has no malware, but when I was reading my Kaspersky Internet Security Events log, I saw,

"5/5/2008 4:49:05 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 206.135.43.66. Protocol/service: UDP on local port 1434. Time: 5/5/2008 4:49:05 PM
5/5/2008 2:43:42 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 202.99.11.99. Protocol/service: UDP on local port 1434. Time: 5/5/2008 2:43:42 PM
5/5/2008 1:11:46 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 202.108.59.89. Protocol/service: UDP on local port 1434. Time: 5/5/2008 1:11:46 PM
5/5/2008 9:31:56 AM Intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 221.239.1.58. Protocol/service: UDP on local port 1434. Time: 5/5/2008 9:31:56 AM
5/5/2008 5:37:57 AM Intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 136.1.7.55. Protocol/service: UDP on local port 1434. Time: 5/5/2008 5:37:57 AM
5/5/2008 4:48:11 AM Intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 61.132.223.14. Protocol/service: UDP on local port 1434. Time: 5/5/2008 4:48:11 AM
5/5/2008 2:35:05 AM Process C:\Windows\system32\regsvr32.exe (PID: 4256): suspicious action. Process trying to delete group Explorer Settings (key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\MBAMShlExt, value , data ).
5/5/2008 2:35:02 AM Process C:\Windows\system32\regsvr32.exe (PID: 4256): suspicious action. Process trying to delete group Explorer Settings (key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt, value , data ).
5/4/2008 11:38:57 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 218.64.237.219. Protocol/service: UDP on local port 1434. Time: 5/4/2008 11:38:56 PM"


Any ideas?

Uh-oh, I'd sugguest downloading multiple malware utilities to remove whatever you have. I sugguest using:
AVG, AVAST, Spybot & your current scanners. Use them all, and remove what you can. After which do a scan with HJT, and post it in the malware forums.

All I can sugguest at the moment is to do a Google search: http://www.google.co...amp;btnG=Search

Hmm, I just tried to do disc cleanup and I got the same error I got on my old computer, I posted a topic about it when it happened, it destroyed my harddrive, and I had to get a new computer, my old topic was

[url="http://www.geekstogo...t-p1197507.html[/url

My computer is running INCREDIBLY slow, it took me atleast 30 minutes to get to this screen where I am now. I'm going to need assistince pretty quick like.

To the malware forum if you believe this is malware.

Do I just post a HJT log?

Edited by ForeColor, 06 May 2008 - 12:11 PM.

http://www.geekstogo...o-Here-f37.html

You're being attacked from the Internet. What is your Firewall? You will need to close/block port 1434

Kaspersky Internet Security.

Done with the Malware Forum, they said I was clean. So any other ideas? Maybe there's not a solution.