WinXP Pro WMI.exe

[DocEvi1]

Anyone else had this crash repeatably on them, I can't seem to spot what on earth it is...

The error I'm getting is suggesting that it is trying to contact a remote port somewhere, and since the "reply" isn't coming in time it's crashing and telling windows it has done so.

It's getting on my ****!

[Rocketmech]

Check your Event Log for more clues.

[DocEvi1]

it isn't registering in there, thats the problem.

[Rocketmech]

I know this is not much help, but maybe a start anyways,
http://support.microsoft.com/default.aspx?scid=kb;en-us;875605

[DocEvi1]

you know, in all the searching of the MS Knowledge base I did, I didn't anything of any relevance at all! And yet, it did exist as there it is ;)

Cheers matey :)

[DocEvi1]

embarrasingly, I know what it is.

It would be the W32/Parite worm, which at the current count has infected some 900 files on my PC. And I still have 2 20gb drive partitions to go.

First virus I've ever got, and it's on a fresh install of XP Sp1 as well :(

[Rocketmech]

:eek:

[DocEvi1]

Wll I must say this is a bit of bummer, I've just lost 900 .exe's to the damned virus, non of them could be saved.

On top of that, I've just re-installed XP on that machine (having to use my old box now) and downloaded all the files from the net, checked them for infection on this machine and copied them across using the supplied driver from Asus and have managed to become infected again.

I'm not sure how it is happening, all the files I'm using, disks... have been checked on another machine, and then rechecked on a third machine and I'm still getting infected. I've made damned sure I'm not connected to the internet (pulling the plug on the net when I put the network cable in) and the virus is getting through.

First virus I've ever got in the 8 years I've been messing about on the net & it comes in the week I have to give a big presentation on a peice of software I wrote for Uni, which as you have probably guessed, disappeared with the virus :(

Bugger!

[fishybawb]

It can spread over networks apparently:

http://www.pandasoftware.com/virus_info/encyclopedia/overview.aspx?idvirus=18181&sind=0

There's a cleaner on there too which might be useful. What are you using to try to remove it at the minute? I know the feeling, I lost 2 months worth of uni code in a hard disk crash :( I'm a bit backup obsessed now.

[DocEvi1]

I was using AVG 6.0, and that got rid of the virus by removing all the infected .exe's, including the AVG itself.

So I re-installed XP, put the minimal drivers on (Via 4in1 and graphics), scanned and got the all clear, installed Firefox, thunderbird & a few other progs and got the all clear and then noticed a few random programs starting up such as ftp.exe, cmd.exe, chenkensi.exe and a few others, turns out that a different virus again.

I have now removed 4 different virus from my system, each scan producing a new virus to remove.

I've scanned 14times using AVG, and now am trying AntiVir scan which is saying there aren't any virus on my machine.

Am I confident of that fact? Am I rollocks!

[DocEvi1]

I must say that AntiVir seems to do a much better job at protecting my PC than AVG6.0 (which is going to be replaced fairly soon).

[fishybawb]

I've been using AntiVir for ages now, and it's never let me down. I don't come across viruses often, but the one time I did AntiVir blocked access to the infected file.

[DocEvi1]

that beep is a beep of misfortune for me. It's just found another 2 files infected.

Different virus again this time. Where the hell are they coming from????

[fishybawb]

:confused:
So this is without a network/internet connection? They must be coming from somewhere...

[DocEvi1]

this is back with a net connection, but fully firewalled/protected as it were.

The last two files were in the Update directory for SP1... just as I was updating windows through windows update.

Sigh, this is getting me down! I was meant to be doing work today, not fannying about trying to get my PC working - that was last week :D

[fishybawb]

Always the way :)
I keep a Ghost image of my working (and virus free ;)) setup now. At the first sign of something going wrong that's going to take more than an hour or so to fix, I just nuke the lot and restore the image. I have neither the time nor the patience to be messing about with stuff trying to get it to work.

[DocEvi1]

maybe thats the worst of it over - haven't had a virus alert for a good couple of hours now.

In 8 years of working with computers, some of them doing things that shouldn't be done due to not knowing any better and this is the first virus I get, and it's a true swine as well.

I used to have little sympathy for victims, not anymore - virii are bloody nightmares!