Guest GDR Posted May 19, 2003 Share Posted May 19, 2003 I received 3 e-mails from support@microsoft.com that all had a virus attached. Fortunately Norton seems to have quarantined them ok. Link to comment Share on other sites More sharing options...
Guest JW Posted May 19, 2003 Share Posted May 19, 2003 I suspect someone is the aviation community has the worm. I received 7 copies of the w32.HLLW.Mankx virus this morning. 4 copies were marked "Cool Screensaver" or similar, and 3 were other headers. All addresses indicated support@microsoft.com which is very likely not correct. Link to comment Share on other sites More sharing options...
RFL Posted May 19, 2003 Share Posted May 19, 2003 I have also received 2 from "support@microsoft.com" with file attachments (.pif). McAfee a/v did not catch them and they were also missed by my isp which is unusual and rare. Due to the very obvious suspicious nature I deleted them immediately. Be careful everyone! Link to comment Share on other sites More sharing options...
Guest regular joe Posted May 19, 2003 Share Posted May 19, 2003 Has anyone other than myself received emails from Big@boss.com? I've been getting them for the past 3 months and Rogers can't seem to figure out where it's coming from. Fortunately my Norton picks it up everytime. Link to comment Share on other sites More sharing options...
Guest RKM Posted May 19, 2003 Share Posted May 19, 2003 Have you tried bouncing the message back to the server, sometimes that will remove your address from the automailer software of the person/s who are sending these. There are programs out there like Mailwasher that will do just that for you. Link to comment Share on other sites More sharing options...
Guest neo Posted May 19, 2003 Share Posted May 19, 2003 It's a flood of infected email attachments at the moment. Serious caution advised. ` Link to comment Share on other sites More sharing options...
Rookie Posted May 19, 2003 Share Posted May 19, 2003 Got one, can't get rid of it with Norton. Any ideas? Link to comment Share on other sites More sharing options...
Kip Powick Posted May 19, 2003 Share Posted May 19, 2003 What do you mean ....you can't get rid of it?? Did Norton pick it up??? Where is the virus?? Link to comment Share on other sites More sharing options...
Kip Powick Posted May 19, 2003 Share Posted May 19, 2003 If you have the virus alluded to by JW..... I would suggest you go to : http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.b@mm.html And download the removal tool. Norton should have caught it IF you have your Virus Definitions up to date... Link to comment Share on other sites More sharing options...
Rookie Posted May 19, 2003 Share Posted May 19, 2003 I just got new computer, and hadn't put norton on yet. So I installed it, and sure enough it found 90 files infected with W32.Kwbot.F.Worm, a different one than JW alluded to. Norton could not fix it, just quaranteen it. Is this enough? Link to comment Share on other sites More sharing options...
Kip Powick Posted May 19, 2003 Share Posted May 19, 2003 No, You will be just deleting the infected files but the virus will still be in your computer. Read the following, probably print it for yourself, and carry out the instructions. If you think the work is beyond your capabilities, get a knowledgeble computer friend to fix it or take the "box" to a computer shop and tell them what you have..... http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.f.worm.html Link to comment Share on other sites More sharing options...
Rookie Posted May 19, 2003 Share Posted May 19, 2003 Thanks Kip. Haven't even had the new box online for a week! Link to comment Share on other sites More sharing options...
Rookie Posted May 19, 2003 Share Posted May 19, 2003 Thanks Kip. Haven't even had the new box online for a week! Link to comment Share on other sites More sharing options...
Rookie Posted May 19, 2003 Share Posted May 19, 2003 Thanks Kip That registry thing looks a little complex. Makes me nervous! Link to comment Share on other sites More sharing options...
Rookie Posted May 19, 2003 Share Posted May 19, 2003 Thanks Kip That registry thing looks a little complex. Makes me nervous! Link to comment Share on other sites More sharing options...
Guest JW Posted May 19, 2003 Share Posted May 19, 2003 ...and another 4 copies of the virus by this afternoon! 11 so far today. Link to comment Share on other sites More sharing options...
Kip Powick Posted May 19, 2003 Share Posted May 19, 2003 Really not too difficult...just make sure you print out the directions and follow them to the letter, based on what OS, (operating System) you have. Good Luck Link to comment Share on other sites More sharing options...
Rookie Posted May 19, 2003 Share Posted May 19, 2003 The wife is going to kill me spending all this time on here, but anyway.... Went into the registry. Followed the directions, and couldn't find exactly what Norton said to look for. Time to enlist the help of one of the computer guys at work. Link to comment Share on other sites More sharing options...
Rookie Posted May 19, 2003 Share Posted May 19, 2003 I didn't open the e-mail, or the attachment that the virus came from. It was from support@microsoft.com and I had read the original post here 30 seconds earlier. However, once I had installed Norton and ran it, it found the virus I listed. I quaranteened the 90 files that were infected, and when I go into the registry as Norton says to do, I don't find anything they say I should. Is it possible I didn't get the worm in my registry? A little confused. Link to comment Share on other sites More sharing options...
Kip Powick Posted May 19, 2003 Share Posted May 19, 2003 If The email was not opened, (the attachment), then you should not have the virus in your computer...HOWEVER...if you have 90 files infected, you must have the virus in the box. It sounds like you got more than one copy of the virus and opened one and the virus snuck/sneaked in If in doubt about the Registry, take the box to a voodoo machine mechanic. Link to comment Share on other sites More sharing options...
Rookie Posted May 20, 2003 Share Posted May 20, 2003 It is weird, maybe I got it from Kazaa. That will teach me to install a virus checker right away. Thanks for your help. Link to comment Share on other sites More sharing options...
inchman Posted May 20, 2003 Share Posted May 20, 2003 If Norton quarantined the virus, then there is nothing to worry about, Rookie. When Norton says it can't fix it, it means that it can't restore the exe file (or whatever) to its original state and this is quite normal with these types of viruses because there is no original state. So, tell Norton to Quarantine it and go into the menu method of accessing Norton, then delete all files in quarantine. That's all there is to it. You're clear because you wore protection. Link to comment Share on other sites More sharing options...
Guest regular joe Posted May 20, 2003 Share Posted May 20, 2003 It's ok that Norton put the virus in quarantine, it's good infact. Go to help and it tells you all about it. Quarantine has separated the virus from your system. IF you ever do have a full blown virus that has corupted your system, you can always reformat your hard drive and that will nuke everything. You lose everything though so it's not good to get viruses (as if you needed me to tell you that.) Cheers RJ Link to comment Share on other sites More sharing options...
Guest regular joe Posted May 20, 2003 Share Posted May 20, 2003 One more thing.... If you know the name of the virus that you think you have, Google it and you'll find out all kinds of stuff about it. But again it's ok to have it quarantined. Link to comment Share on other sites More sharing options...
Kip Powick Posted May 20, 2003 Share Posted May 20, 2003 Outside help may not be required.Delete all those 90 files and once you have installed Norten, do another FULL SYSTEM scan. If your system comes up clean, then you have no worries as Norten already cleaned up the Registry. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.