Board logo

virus advice
theconrodkid - 29/9/03 at 03:24 PM

i got a virus,no not on that bit of me,its in outlook expressoutl32c.exe if i try to delete it the compo goes to a blue screen and shuts down,what to do next?

Jasper - 29/9/03 at 03:33 PM

Splash out on anti-virus software...

theconrodkid - 29/9/03 at 03:39 PM

done that,mcafee thingy ps bought a suit,shirt n tie,me gettin married??? dont think so

Surrey Dave - 29/9/03 at 03:52 PM

Did you do anything to get it?

I've received what look like updates from Microsoft for Outlook and I.E. ,but didn't install them 'cos I got paranoid.

Has anyone else had these updates?

New Security Patch
Newest Network Patch


Are they genuine?

[Edited on 29/9/03 by Surrey Dave]

theconrodkid - 29/9/03 at 04:06 PM

afaik i havnt done anything to it,havnt had any downloads either

DaveFJ - 29/9/03 at 04:07 PM

If you had no anti virus software how did you know that you had a virus?

please give us full details.

If you recive any unsolicited emails (even/especially) apparently from Microsoft purporting to contain updates - delete immediately and soundly chastise yourself for ever entertaining the idea of opening them!

theconrodkid - 29/9/03 at 04:26 PM

i got anti virus free avg thingy but kept playing round and switching off,bought mcafee,sorted probs but still says got virus on board

Staple balls - 29/9/03 at 05:53 PM

quote:
Originally posted by Surrey Dave
Did you do anything to get it?

I've received what look like updates from Microsoft for Outlook and I.E. ,but didn't install them 'cos I got paranoid.

Has anyone else had these updates?

New Security Patch
Newest Network Patch


Are they genuine?

[Edited on 29/9/03 by Surrey Dave]



that sounds like a standard virus email, basically if you've not asked for it, don't install it. ever.

same with paypal/bank emails, if they ask for you to confrim details, don't, probably a scam.

Surrey Dave - 29/9/03 at 07:29 PM

Thanks Guy's I don't feel so ridiculous now for NOT opening these (updates?).

Mk-Ninja - 29/9/03 at 08:15 PM

Sorry cant help get rid of your virus but I do know that you need to go to the Microsoft web site and get all the updates you can. They are putting fixes to thier bug free software all the time. I think you are right not to install anything that comes to you saying its an upgrade. I have my system set up so it updates directly from Microsft all the time. I know it dosnt help you at the moment but it could stop you getting another bug in the future.

JoelP - 29/9/03 at 08:51 PM

i turned my firewall on full and get dropped incoming every few seconds. mostly innocent i guess, and now emails dont get notified, but who cares? its my damned computer at least it is now!!!!! theres always prats trying to fiddle your comp.

one i heard of was if a junk (literally gobbledigook) message arrived at a specific port, a fault meant that the next one was allowed thru, so this was exploited to let all sorts of bent shtuff go on. bar stewards...

i deleted loads of files in my quest to clean it up, i had 73 virus files at one point (all copies of the same), so binned them all. wasnt sure if i was meant to but seems to work still

i still have a few files that cant be moved, defragged or scanned for Vs. who knows?

ned - 30/9/03 at 09:04 AM

I received 5-10 of these 'microsoft security' emails last week whilst away.

they are all 'dodgy' and should be deleted. Microsoft never emails updates out, least of all as .exe files!

to check out a message right click on it in the inbox and hit properties (if you're an outlook express user) then check the from address and if in doubt then hit 'message source' and look in the headers, it'll tell you what servers the message has been routed through, normally very apparant if not genuine!

the emails i got looked similar to this, quite convincing to the unsuspecting soul....


pbura - 30/9/03 at 12:27 PM

quote:
Originally posted by theconrodkid
i got anti virus free avg thingy but kept playing round and switching off,bought mcafee,sorted probs but still says got virus on board


Some viruses require some additional manual work to clean up. Try reading up on yours at the McAfee site, and also at Microsoft. Search on the specific virus name and also on any 'family' names or related names that McAfee reports to you. If you just bought McAfee, their tech support people will sometimes help you sort it out.

Once, I had a virus detected, and found in some more reading that the virus had opened the way for a Trojan that was not detected! This was on a client's network and not my computer, btw, and the thing took over all the file permissions on the server and made it subordinate to a remote host.

Look for funny entries in your autoexec.bat and config.sys files, and also unfamiliar .bat or .exe files at the root directory (c:/).

You may also want to check whether your C drive is shared (right-click on C in My Computer) and, if so, who has what permissions.

Hope this helps!

Pete

stephen_gusterson - 30/9/03 at 12:42 PM

They ARE viruses!

I have had loads of copies. Norton has stopped at least 6 copies coming my way.

atb

steve


quote:
Originally posted by Surrey Dave
Did you do anything to get it?

I've received what look like updates from Microsoft for Outlook and I.E. ,but didn't install them 'cos I got paranoid.

Has anyone else had these updates?

New Security Patch
Newest Network Patch


Are they genuine?

[Edited on 29/9/03 by Surrey Dave]

theconrodkid - 30/9/03 at 06:10 PM

ive got 2 options,a big axe or wait till someone who knows what he,s doing pops round

Peteff - 30/9/03 at 08:32 PM

Your new one could be finding the definitions in your old one if you haven't.

yours, Pete.

theconrodkid - 1/10/03 at 06:30 AM

good thinking pete

Fozzie - 1/10/03 at 08:12 AM

Yep, they are virus's!
I have been caught out in the past by MacAfee, and now only swear by Norton which scans all of my out going mail and incoming mail before it lands in 'Outlook/Express'. It also updates the virus definitions automatically each time I switch the mowchine on.
You need a 'removal tool'

http://www.sarc.com/avcenter/venc/data/w32.swen.a@mm.html

try a looksee on the above, it sounds very much like your virus.

(Copy and paste the address if it don't want to know automatic)

Good luck
ATB Fozzie

theconrodkid - 2/10/03 at 04:37 PM

deleted the avg and all seems fine now(pinkies crossed)thanks for your advice one n all