|
|
 |
|
|
Pages: 1
First bout with the Worm... I lost!
(Click here to view the original thread with full colors/images)
Posted by: Spork Lover
Well, it finally happened, I caught one of those worms... I think I caught something else as well... either way... norton couldnt fix it.. couldnt get rid of it or anything.
The work infect some .dll file.. Norton gave me the name and path, when I went to look in that location, it wasnt there... well it was hidden. It was in a folder i didnt recognize (inetpub) and filled with other scripts and dlls. I went to delete the folder, and then the error source file in use(it gave the name of the worm infected file). Great So then I couldnt get rid of the file, so I decided, heck I've got an up to date image... lets ride this one till it goes.
I dial up to the internet, and connect to OTS... and I notice something different... there are a ton of Choice(use your imagination, it was probably included) words in between the normal words... Remember Mad Libs when we were in middle School?... heh it was kind of like that. It was quite funny at first, but then IE kept locking up.
After a while things stop functioning. I go back and play with inetpub... It allowed me to move it to a cdrw and format it. Then everything hit the Fan...well... needless to say Im on the backup image now... Damn worm... Norton didnt do crap for it, and I have it running all the time. I didnt even DL anything in my emails. I even have my emails virus protected.
My ISP was having probs this morning with their dial in servers... hope this worm problem didnt have anything to do with it.
Posted by: Shalome
What worm did you get, Spork? Sounds like a weird one to me.. and it also sounds like you're going to have to go through with a drive format.
You didn't have to open an attachment in Outlook to get some of the new kinds of worms.. some open automatically when you even VIEW a message in Outlook, and others come across ICQ or IRC. The nastiest ones come from malicious hidden code in websites that executes automatically if you're using Internet Explorer.
Are you using the latest Norton virus definitions? With the way worms are coming out lately, it's a good idea to check the Symantec site every few weeks and download the newest definition files.
Good luck with this one..
Posted by: Darky!
This is exactly why i dislike norton.
Use mcafee, even if it CAN'T fix it while your in windows, it CAN fix it in dos. if you have mcafee, just use this command in dos, you mite have to do a find on the file first, since mine was in the "Common Files" folder, instead of C: where it was supposed to be.
Command:
scanpm /adl /clean /all
Mine, acctually, now looking at it, i had to do this to get to th efolder (For dos illeteerates)
cd Prorgra~1
cd common~1
cd network~1
cd virusscan~1
cd 4.0xx
scanpw /adl /clean /all
This is just where it stuck it for me, but it may have put it in a different area for you (Depending on the version of mcafee), if you have mcafee. I was useing 6. something, but the install file, wich was on my HD, was corrupted from the last virus i had, and i of corse formatted, so i no longer have it, until i download it from mcafee.com again.
Posted by: Spork Lover
Dont remember which worm I caught. but it had the usually w32 prefix and @MM suffix. This means it's a mass mailer.... I know for sure I havent received any emails from anyone other than the boss. I formatted my c drive I was able to do that... killed my linux partition and formatted that as well... so all is good now.
Even with the up to date definitions, and regular scans... Norton couldnt take care of me, it said it saw it but couldnt get rid of it... yay... you are turning out to be worth your money.
Posted by: Darky!
Like i said...
Mcafee will save you more times then norton.
Posted by: one
i switched to calypso mail client to get away from outlook. so far so good. you can try a free download, actually i've been using it with no problems for months now.
http://download.cnet.com/downloads/1,10150,0-10001-103-0-1-7,00.html?tag=srch&qt=calypso&cn=Utilities&ca=10001
|
|
|
|
|
