Nintendo World Report Forums

Community Forums => General Chat => Topic started by: thecubedcanuck on March 13, 2004, 04:16:56 AM

Title: HELP with a WORM
Post by: thecubedcanuck on March 13, 2004, 04:16:56 AM

Does anybody know how or what I can use to check if I have a worm on my PC?
Norton isnt picking anything up but people tell me I am sending them e-mail when I am not.

Any help is appreciated.

Thanks

Title: RE: HELP with a WORM
Post by: manunited4eva22 on March 13, 2004, 05:40:45 AM

My advice, do deep scans every 2 hours, go to trendmicro.com, and run their program. Also, run live update and windows update, install all updates (security anyway)

Go into your task list with ctrl alt del.  Look at programs that are running under your name (not system or network).  Do some guess and check work on these, if you don't recognize the extension, turn it off, if there are no harmful side effects, keep it off, do this and see if the task is ended.  If you can find the task, it's easier for you to find a patch, or maybe a virus update to fix it.

Title: RE: HELP with a WORM
Post by: ghostVi on March 13, 2004, 05:47:21 AM

You need more info to fight it - check the contents of the mail the worm is supposed to have sent (subject, body, attachment type/name). Then look up the type of the worm and what you should do about it (google should be able to find it).

Title: RE: HELP with a WORM
Post by: KDR_11k on March 13, 2004, 09:30:00 AM

I'd say somebody you know is infected with a recent virus. Newer virii can spoof email addys and will appear to come from sources they don't. If Norton doesn't find anything even after an update, it's not YOUR PC. One of your friends is the culprit, make sure every one of them does a virus scan (no way to tell who it is). All you know is that somebody with both your and your friends' addresses has a virus.

Title: RE: HELP with a WORM
Post by: ghostVi on March 13, 2004, 01:16:50 PM

True. I've received several of those, pretending to come from the admins ("your mail contains a virus - open the zipped attachment, here's the password" etc etc).

You might have a chance to get to the original sender (at least the IP) by looking at the message headers - you'll need the last "Received:    from".

Title: RE: HELP with a WORM
Post by: Termin8Anakin on March 13, 2004, 01:26:53 PM

I never open any email unless they are from people i know, or websites i know i've registetred at.
Everything else just gets deleted, no second thoughts.  

Title: RE: HELP with a WORM
Post by: Draygaia on March 13, 2004, 03:39:07 PM

Norton should be that good.  But I don't think its something to be worried about.  When I used to have people talk to me on MSN IM they say I have gotten a virus and that I cause their bane.  Bah!  Other than that ass crapper sobig blaster worm I have had no problems with viruses.  

Title: RE: HELP with a WORM
Post by: TOY on March 13, 2004, 05:21:23 PM

KDR nailed it. If Norton doesnt find anything its because it isnt there. Anyone who has ever received an email from you could be responsible. Terminate, Im like you, I dont open email from people I dont know, but that isnt enough. If your friends dont keep their virus software up to date they can have a virus and not know it. A very good friend of mine had the Klez virus and it mailed itself to me with an attachment, as soon as I clicked on the download button my Norton virus stopped it in its tracks. Moral to this story, keep YOUR virus software updated and you should have nothing to worry about.


TOY  

Title: RE: HELP with a WORM
Post by: KDR_11k on March 13, 2004, 07:59:22 PM

My friends are fortunately smart enough to not get infected, I know people who aren't, though. Doesn't matter, I notice a virus by its appearance (exe, pif, scr). A friend would never just say "see attachment" (let aside they wouldn't write in English anyway), they'd explain what they have attached there.

Title: RE:HELP with a WORM
Post by: Uncle Rich AiAi on March 13, 2004, 09:12:16 PM

My advice would be to throw your PC out the window and get a new one!

Okay, maybe not!  You say you are sending people emails when you are not.  Do you have an email contact list?  If so, delete everyone on the list.  It is best not to have a contact list because there are viruses to find them and send out emails to people on that list.

If you really next a contact list, write them on a piece of paper.  Yeah, it sounds lame, but I don't recommend you could putting 'em in a txt or doc file, chances are viruses can find them too.

Title: RE: HELP with a WORM
Post by: thecubedcanuck on March 15, 2004, 01:48:24 AM

Thanks guys, I have run Norton 3 times with updated definitions and still nothing, so I sure I am fine. The problem is my wifes family all have PC's that are so cluttered with crap, not virus protected with anything more than a late 90's version of Mc Afee, and then will open any e-mail that comes their way.

Again thanks.

Title: RE: HELP with a WORM
Post by: nitsu niflheim on March 15, 2004, 05:25:42 AM

I had a Trojan thingy on my old computer and I used Norton on that computer and was religiously obsessive about keeping my definitions as up to date as possible, but my anti-virus didn't pick up the problem until after the problem had already made a mess of my computer, and not until I ACTUALLY manually went into the folder that the infected file was located that the anti-virus picked it up.  Of course by then it was too late, it had already wrecked chaos on my computer.  My computer, both my old one and my new one do a full system scan no less than once a week, and it never picked it up.  I lost faith in Norton because of this, and my new computer is running with McAfee programs.  I haven't updated my Norton anti-virus definition in about three weeks because I haven't used that computer since then, but my new computer is as up to date as possible as everything gets downloaded whenever I get online, and if something new is available.  

But what it did was move programs all over the place, deleted cursors and removed items from the drop down list you can get by right clicking and selecting new.  Most noticeable was the removal of MSPaint from the computer all together and my computer not know what a .BMP file was, unless I opened it in a different program.  I had to go into add/remove programs and add the programs again.  

My homepage would always change to some god forsaken page and following the instructions on how to fix it did no good because whenever I restarted my machine everything I had just done was reversed back to what it had been before, and I have no idea how to get rid of the problem.  My new computer has the same problem with IE with a constant changing of homepage, and nothing I do can fix it.  My anti-virus picked up the problem this time as soon as it was started, and deleted the infected files, but it still managed to screw up my Internet Explorer and I have no idea how to repair it other than to erase the whole mess and reinstall.  Also on my old computer I couldn't use some program that could use the internet to download content because whatever the hell had happened had changed the address the program had to go to, to access information, so it would stop responding.  I just stopped using IE as it is and use the variant IE browser that my internet connection uses and nothing about that was changed, since everything that I do with it can be carried from machine to machine just by signing in, favorites and homepage.  I would like to know how to correct or repair IE so that the homepage I set it to stay the current page and I don't have to reset it to default every time I go into the options, also to delete the stupid favorites it keeps putting in the favorites folder.

I don't read any email unless I know who it is from, and my internet service and my anti-virus both scan my emails for virus' when I open anything, or if the email is from a new service that I am signing up for that goes into my junk folder because my email is set to exclusive.  I don't have a contact list on my computer, but I do have one in my email, but I don't think it is store locally on my computer, nor are my messenger contacts.  If they are I have no idea where they are located.
 

Title: RE: HELP with a WORM
Post by: KDR_11k on March 16, 2004, 06:56:52 AM

nitsuj: Keep an up-to-date anti-spyware and anti-CWS tool on your comp as well. CWS is especially nasty and can wreck your whole internet connection if removed improperly.

Title: RE: HELP with a WORM
Post by: nitsu niflheim on March 16, 2004, 09:30:55 AM

what is CWS, now that is new to me?  Okay, any reccomendations of reliable anti-spyware and anti-CWS tools?

Title: RE: HELP with a WORM
Post by: KnowsNothing on March 16, 2004, 12:39:48 PM

Well, I know that SOMEONE will say Spybot Search & Destroy  so it might as well be me.

So I said it.

Title: RE: HELP with a WORM
Post by: KDR_11k on March 17, 2004, 04:00:09 AM

Cool Web Search. The fastest changing and most malicious spyware around. Sorry, I don't have a link handy, but unless you're using Microsoft Internet Explorer and Microsoft Java VM (default on Windows unless replaced by Sun Java) you won't have to worry that much about it as it infects mostly IE users.

Title: RE: HELP with a WORM
Post by: Uncle Rich AiAi on March 18, 2004, 04:09:33 PM

Another reason not to use IE!

Title: RE:HELP with a WORM
Post by: KrazyJ on March 23, 2004, 06:33:34 AM

I would try out Symantec.com and look for a tool that eliminates the specific worn you have. That's what I had to do for my computer when it was infected.

Title: RE: HELP with a WORM
Post by: nitsu niflheim on March 23, 2004, 09:51:47 AM

I would just like to add that my anti-virus program on my new computer finally picked up the problem with IE I was having problems with the other day, so it now stays on the start page I decide. I use Spybot, have been for a while, but it didn't pick anything up.

Title: RE: HELP with a WORM
Post by: KDR_11k on March 24, 2004, 12:09:10 AM

Antivirus programs aren't allowed to kill spyware. Something about "anticompetitive behaviour" or something.

Title: RE: HELP with a WORM
Post by: nitsu niflheim on March 24, 2004, 02:16:01 AM

well it was a trojan something or other that was wrong with IE.  I don't know the name of the trojan off the top of my head, but I have it recorded at home.