Re: META: Virus Redux

From: Mike Lorrey (mlorrey@datamann.com)
Date: Wed Mar 27 2002 - 07:49:14 MST


e_shaun@extropy.org wrote:
>
> Hi all,
>
> Well, in my last message, it seems that I spoke too soon. These viruses have
> taken over my computer, and somehow embedded themselves in my Norton files.
> Before that, Norton couldn't delete or quarantine some files since those files
> were allegedly "in use." My computer is as slow as syrup right now, and I'm
> going to avoid sending any emails from my regular account until I've gotten rid
> of this thing for sure.
>
> Obviously, any suggestions to me directly would be very much appreciated.

I take it that this is a worm you are dealing with. Such generally have
two to four files in various places and will write one or more lines to
your win.ini or other syseditable files to trigger their further
action.... They might also have written themselves to your system
registry, and may download other virii when you are online.

Registry Medic (available through download.com) is useful for cleaning
them out of your registry. Norton is useless against a good number of
worms, esp the newer ones, generally because they operate as several
different files, although both McAfee and Norton have information on
their websites with step by step info on cleaning these worms out of
your system. If you are unable to access either website (another common
tactic of new worms is to block these sites from infected machines),
please let me know as well as relevant behavioral info about your
infection so I can find the right info for you.



This archive was generated by hypermail 2.1.5 : Sat Nov 02 2002 - 09:13:07 MST