[Merged] Netsky Virus - Page 2

MadGamer · 02-03-2004, 18:59

Quote:

Originally Posted by paulyoung666

dont be so cruel and heartless , the poor lad has got an infection , he wants blankets and chicken soup

, actually i was going to post the same but you beat me too it

@ WNA have you got it sorted ??????????

I bet Kronas started that thread??? BTW i got it sorted.

Stuartbe · 02-03-2004, 19:01

Nooooooooooo dont open that email WNA....... Oh well - too late

MadGamer · 02-03-2004, 19:40

Quote:

Originally Posted by stuartbe

Nooooooooooo dont open that email WNA....... Oh well - too late

Its sorted now anyway. Does anyone know to to import a blobked senders list from OE to Outlook?

Racingdick · 02-03-2004, 20:29

I had that today and it put a file in my c:/windows dir called winlogon..

this couldnt be deleted and whenever running caused slow browsing and caused CPU usage to go up.

After removing it from msconfig i was able to remove with no probs..

Anyone with similar?

paulyoung666 · 02-03-2004, 20:32

Quote:

Originally Posted by Racingdick

I had that today and it put a file in my c:/windows dir called winlogon..

this couldnt be deleted and whenever running caused slow browsing and caused CPU usage to go up.

After removing it from msconfig i was able to remove with no probs..

Anyone with similar?

not seen that , mind you my a/v is picking them up so it isnt a problem , what a/v are you running ??????????????

Racingdick · 02-03-2004, 20:43

norton updates every week, did liveupdate prior to going to work

downquark1 · 02-03-2004, 21:04

Erm

I just got this

Quote:

C:\System Volume Information\_restore{20DED501-38D8-4892-8EDF-12B721E5C833}\RP157\A0014978.exe
is infected with the W32.Netsky.C@mm virus.
Access to the file was denied.

I didn't even open the file

downquark1 · 02-03-2004, 21:42

Quote:

Originally Posted by downquark1

Erm

I just got this I didn't even open the file

V

I've ran a full system scan, turned off sys restore and am running the w.32netsky removal tool for the second time. Seems like a false alarm

or maybe it detected the one in quarentine.

Chimaera · 02-03-2004, 21:45

Well I've had 16 sent to me at work - luckily the Council's wonderful up to date software detected them all!
(Yes I was surprised too!

)

Sipowicz · 02-03-2004, 22:10

Got Norton Securities 2004, on auto update and it has been catching this one on a regular basis (2 today!). Just got a return from a postmaster claiming that I had sent this damn virus!! And from my main user account!! Come to think of it, it has been playing up for ages, taking forever to download incoming mail with messages in Outlook saying something like "downloading 1 of 88. Time remaining 47 minutes" and I am on 600 service. Now I am confused, just done a forced scan and found no record of any virus(??)

Stu038 · 02-03-2004, 22:40

Quote:

Originally Posted by Sipowicz

Just got a return from a postmaster claiming that I had sent this damn virus!! And from my main user account!! (??)

Similar happened to me a couple of days ago from an address I'd never heard of and certainly wasn't in my contacts. Sure enough it came complete with its own copy of the Netsky B virus in the alleged returned mail. Damn SNEAKY

02-03-2004, 23:25

Quote:

Originally Posted by Sipowicz

Got Norton Securities 2004, on auto update and it has been catching this one on a regular basis (2 today!). Just got a return from a postmaster claiming that I had sent this damn virus!! And from my main user account!! Come to think of it, it has been playing up for ages, taking forever to download incoming mail with messages in Outlook saying something like "downloading 1 of 88. Time remaining 47 minutes" and I am on 600 service. Now I am confused, just done a forced scan and found no record of any virus(??)

Hi Sipowicz

imo also run an alternative 'spyware' detector, as well as your Norton stuff - adaware, or spybot, for example

Sipowicz · 03-03-2004, 23:03

Quote:

Originally Posted by homealone

Hi Sipowicz

imo also run an alternative 'spyware' detector, as well as your Norton stuff - adaware, or spybot, for example

Thanks for the input, I have spybot and adaware running.

I had a notification at work today about this latest round of attacks. It described the very sort of message I got about being responsible for sending a virus. It is a technique the virus writers use, whereby they spoof the address of the sender from the address book of someone infected with the virus! I was not aware that they do this sort of thing!

On closer inspection of the postmaster notification, it seems that I "sent" the infected e-mail, whilst at work and with the home pc switched off!

Sipowicz · 03-03-2004, 23:05

Quote:

Originally Posted by Stu038

Similar happened to me a couple of days ago from an address I'd never heard of and certainly wasn't in my contacts. Sure enough it came complete with its own copy of the Netsky B virus in the alleged returned mail. Damn SNEAKY

Ouch! Nasty...........

iadom · 03-03-2004, 23:09

Quote:

Originally Posted by Racingdick

norton updates every week, did liveupdate prior to going to work

Once a week is not enough, you should be able to set NAV to auto update. if not check every day for new deffiles. My AV from Command/Authentium CSAV has updated automatically 5 times in the past 48 hours.