Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Information > Worm

Reply
 
 
Ray Wesley Kinserlow Jr.
Guest
Posts: n/a
 
      06-07-2004
According to my NAV 2002 I have gotten infected with a worm. I am
running Win98SE. Here is the Norton activity clip.

The compressed file data.rtf
..scr within application.zip within C:\RECYCLED\NPROTECT\00038134.MB is
infected with the W32.Netsky.P@mm virus.
Unable to delete the file.

I have some questions. Why doesn't this infection show up on a
complete system scan by NAV 20002? Where the hell is the Symantec
removal tool? I tried to find it and got nowhere. A link would be
nice.

Ray Wesley Kinserlow Jr.
Lubbock, Texas
kinserlow at hotmail dot com
homepage: www.members.cox.net/rkinserlow
webmaster: www.d16acbl.org/U197/index.html
 
Reply With Quote
 
 
 
 
Pepperoni
Guest
Posts: n/a
 
      06-07-2004
http://vil.nai.com/vil/stinger/

http://www.symantec.com/avcenter/ven...oval.tool.html


"Ray Wesley Kinserlow Jr." <> wrote in message
news:...
> According to my NAV 2002 I have gotten infected with a worm. I am
> running Win98SE. Here is the Norton activity clip.
>
> The compressed file data.rtf
> .scr within application.zip within C:\RECYCLED\NPROTECT\00038134.MB is
> infected with the W32.Netsky.P@mm virus.
> Unable to delete the file.
>
> I have some questions. Why doesn't this infection show up on a
> complete system scan by NAV 20002? Where the hell is the Symantec
> removal tool? I tried to find it and got nowhere. A link would be
> nice.
>
> Ray Wesley Kinserlow Jr.
> Lubbock, Texas
> kinserlow at hotmail dot com
> homepage: www.members.cox.net/rkinserlow
> webmaster: www.d16acbl.org/U197/index.html



 
Reply With Quote
 
 
 
 
colin
Guest
Posts: n/a
 
      06-07-2004
Ray Wesley Kinserlow Jr. wrote:
> According to my NAV 2002 I have gotten infected with a worm. I am
> running Win98SE. Here is the Norton activity clip.
>
> The compressed file data.rtf
> .scr within application.zip within C:\RECYCLED\NPROTECT\00038134.MB is
> infected with the W32.Netsky.P@mm virus.
> Unable to delete the file.
>
> I have some questions. Why doesn't this infection show up on a
> complete system scan by NAV 20002? Where the hell is the Symantec
> removal tool? I tried to find it and got nowhere. A link would be
> nice.
>
> Ray Wesley Kinserlow Jr.
> Lubbock, Texas
> kinserlow at hotmail dot com
> homepage: www.members.cox.net/rkinserlow
> webmaster: www.d16acbl.org/U197/index.html


http://securityresponse.symantec.com...oval.tool.html

http://securityresponse.symantec.com...r/FxNetsky.exe

 
Reply With Quote
 
Kenny
Guest
Posts: n/a
 
      06-07-2004
First hit of 20,100 on Google, scroll down page for removal tool.

http://
--

Kenny


"Ray Wesley Kinserlow Jr." <> wrote in message
news:...
> According to my NAV 2002 I have gotten infected with a worm. I am
> running Win98SE. Here is the Norton activity clip.
>
> The compressed file data.rtf
> .scr within application.zip within C:\RECYCLED\NPROTECT\00038134.MB is
> infected with the W32.Netsky.P@mm virus.
> Unable to delete the file.
>
> I have some questions. Why doesn't this infection show up on a
> complete system scan by NAV 20002? Where the hell is the Symantec
> removal tool? I tried to find it and got nowhere. A link would be
> nice.
>
> Ray Wesley Kinserlow Jr.
> Lubbock, Texas
> kinserlow at hotmail dot com
> homepage: www.members.cox.net/rkinserlow
> webmaster: www.d16acbl.org/U197/index.html



 
Reply With Quote
 
Ray Wesley Kinserlow Jr.
Guest
Posts: n/a
 
      06-07-2004
On Mon, 7 Jun 2004 19:15:15 +0100, "Kenny" <> wrote:

>First hit of 20,100 on Google, scroll down page for removal tool.
>
>http://



DL'ed the FxNetsky.exe and it just locks up when I try to run it.
DL'ed the free AVG virus scanner and it found nothing.
DL'ed Stinger and the following was the result of a scan--
Scan initiated on Mon Jun 07 15:36:21 2004

C:\RECYCLED\NPROTECT\00038132.MB\00003edf.EML\Robe rt W..txt.exe

Found the W32/Bugbear@MM virus !!!

C:\RECYCLED\NPROTECT\00038132.MB\00003edf.EML\Robe rt W..txt.exe has
been deleted.

Number of clean files: 150454

Number of infected files: 1

Number of files deleted: 1


Maybe if I run enough virus scanners I will find all the viri on this
system! All the viri have appeared in the C:\RECYCLED\NPROTECT
directory. Does anyone know the purpose of this directory. I have
thought of deleting all the files in this directory but am not sure it
is safe to do this.

Ray Wesley Kinserlow Jr.
Lubbock, Texas
kinserlow at hotmail dot com
homepage: www.members.cox.net/rkinserlow
webmaster: www.d16acbl.org/U197/index.html
 
Reply With Quote
 
Thor
Guest
Posts: n/a
 
      06-08-2004
for one thing, you should run these tools in safe mode for maximum
effectiveness.


...
"Ray Wesley Kinserlow Jr." <> wrote in message
news:...
> On Mon, 7 Jun 2004 19:15:15 +0100, "Kenny" <> wrote:
>
> >First hit of 20,100 on Google, scroll down page for removal tool.
> >

>
>http://

l
>
>
> DL'ed the FxNetsky.exe and it just locks up when I try to run it.
> DL'ed the free AVG virus scanner and it found nothing.
> DL'ed Stinger and the following was the result of a scan--
> Scan initiated on Mon Jun 07 15:36:21 2004
>
> C:\RECYCLED\NPROTECT\00038132.MB\00003edf.EML\Robe rt W..txt.exe
>
> Found the W32/Bugbear@MM virus !!!
>
> C:\RECYCLED\NPROTECT\00038132.MB\00003edf.EML\Robe rt W..txt.exe has
> been deleted.
>
> Number of clean files: 150454
>
> Number of infected files: 1
>
> Number of files deleted: 1
>
>
> Maybe if I run enough virus scanners I will find all the viri on this
> system! All the viri have appeared in the C:\RECYCLED\NPROTECT
> directory. Does anyone know the purpose of this directory. I have
> thought of deleting all the files in this directory but am not sure it
> is safe to do this.
>
> Ray Wesley Kinserlow Jr.
> Lubbock, Texas
> kinserlow at hotmail dot com
> homepage: www.members.cox.net/rkinserlow
> webmaster: www.d16acbl.org/U197/index.html



 
Reply With Quote
 
Plato
Guest
Posts: n/a
 
      06-08-2004
Ray Wesley Kinserlow Jr. wrote:
>
> According to my NAV 2002 I have gotten infected with a worm. I am
> running Win98SE. Here is the Norton activity clip.
>
> The compressed file data.rtf
> .scr within application.zip within C:\RECYCLED\NPROTECT\00038134.MB is
> infected with the W32.Netsky.P@mm virus.
> Unable to delete the file.


Heck, if the bug is just in the recycled folder boot to dos and deltree
it.


--
http://www.bootdisk.com/
 
Reply With Quote
 
Ray Wesley Kinserlow Jr.
Guest
Posts: n/a
 
      06-08-2004
On 7 Jun 2004 22:59:07 -0500, Plato <|@|.|> wrote:

>Ray Wesley Kinserlow Jr. wrote:
>>
>> According to my NAV 2002 I have gotten infected with a worm. I am
>> running Win98SE. Here is the Norton activity clip.
>>
>> The compressed file data.rtf
>> .scr within application.zip within C:\RECYCLED\NPROTECT\00038134.MB is
>> infected with the W32.Netsky.P@mm virus.
>> Unable to delete the file.

>
>Heck, if the bug is just in the recycled folder boot to dos and deltree
>it.


I went to dos and deleted the file under the recycled/nprotect
directory. Hopefully that took care of the Netsky virus. I will try
running the FxNetsky.exe in the safemode and see what happens.


Ray Wesley Kinserlow Jr.
Lubbock, Texas
kinserlow at hotmail dot com
homepage: www.members.cox.net/rkinserlow
webmaster: www.d16acbl.org/U197/index.html
 
Reply With Quote
 
Ashton Fagg
Guest
Posts: n/a
 
      06-10-2004
Hi Ray
Have you tried clearing your temp files and the recycle bin?
Ash
"Ray Wesley Kinserlow Jr." <> wrote in message
news:...
> According to my NAV 2002 I have gotten infected with a worm. I am
> running Win98SE. Here is the Norton activity clip.
>
> The compressed file data.rtf
> .scr within application.zip within C:\RECYCLED\NPROTECT\00038134.MB is
> infected with the W32.Netsky.P@mm virus.
> Unable to delete the file.
>
> I have some questions. Why doesn't this infection show up on a
> complete system scan by NAV 20002? Where the hell is the Symantec
> removal tool? I tried to find it and got nowhere. A link would be
> nice.
>
> Ray Wesley Kinserlow Jr.
> Lubbock, Texas
> kinserlow at hotmail dot com
> homepage: www.members.cox.net/rkinserlow
> webmaster: www.d16acbl.org/U197/index.html



 
Reply With Quote
 
Ray Wesley Kinserlow Jr.
Guest
Posts: n/a
 
      06-12-2004
On Thu, 10 Jun 2004 07:23:25 GMT, "Ashton Fagg"
<> wrote:

>Hi Ray
>Have you tried clearing your temp files and the recycle bin?
>Ash
>"Ray Wesley Kinserlow Jr." <> wrote in message
>news:.. .
>> According to my NAV 2002 I have gotten infected with a worm. I am
>> running Win98SE. Here is the Norton activity clip.
>>
>> The compressed file data.rtf
>> .scr within application.zip within C:\RECYCLED\NPROTECT\00038134.MB is
>> infected with the W32.Netsky.P@mm virus.
>> Unable to delete the file.
>>
>> I have some questions. Why doesn't this infection show up on a
>> complete system scan by NAV 20002? Where the hell is the Symantec
>> removal tool? I tried to find it and got nowhere. A link would be
>> nice.
>>
>> Ray Wesley Kinserlow Jr.
>> Lubbock, Texas
>> kinserlow at hotmail dot com
>> homepage: www.members.cox.net/rkinserlow
>> webmaster: www.d16acbl.org/U197/index.html

>



Yes.


Ray Wesley Kinserlow Jr.
Lubbock, Texas
kinserlow at hotmail dot com
homepage: www.members.cox.net/rkinserlow
webmaster: www.d16acbl.org/U197/index.html
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Security Experts Warn of Kama Sutra Worm (yet another MS worm) Imhotep Computer Security 4 01-30-2006 01:53 PM
Worm\Spybot (P2P-Worm.Win32.SpyBot.a) Danny Computer Information 0 08-14-2005 01:09 PM
worm/spybot.17.t (worm spybot 17t) detected by AVG code_wrong Computer Security 0 05-15-2004 04:40 PM
Antigen found VIRUS= I-Worm.Sobig.f (Kaspersky,CA(InoculateIT)) worm ANTIGEN_ML-MAIL Ruby 0 09-09-2003 07:11 PM
New anti-blaster worm attempts to fix RPC/DCOM vuln - W32/Nachi.worm Lord Shaolin Computer Security 6 08-20-2003 10:39 PM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57