I Got Worms......

[redduffer999]

Hi everyone. Just ran my virus checker and it has picked up worm Benjamin. Im using AVG free edition and this has taken care of the worm - I think..

In an old box somewhre I have Norton Antivirus 2001. It isn't installed on my PC because a friend of a friend suggested that AVG is a much better product.

What do you guys think? Should I upgrade AVG to the full version or swop over to Norton.

I'm a bit concerned that this worm made it on to my machine. I check the Grisoft home page daily for updates and have AVG set to look for updates.
I only us the PC for net surfing etc but do use KaZaA & Winx.

Thanks in advance.

------------------
redduffer999

[YODA74]

Never hurts to have Two what one doesn't pick up the other one should. just don't try to have them running at the same time.

------------------
YODA74@windows-sucks.com
CCMR (http://www.dreamwater.net/tech/yoda74/index.html)

PUSH TO TEST. RELEASE TO DETONATE.
[Closed captioned for the thinking impaired.]

[ErnieK]

Yoda
Can you run two (2) AV software on the computer at a time? I have always been told that this would create problems and should not be done.

------------------
Ernie

[Mitch Hatfield]

I don't have the Norton Anti-Virus software, but I do now use AVG - in preference to the McAfee on-lne virus guard, which I paid a $40 annual subscription for only a couple of months back.

So far AVG has been much more stable and tolerant of my other software than McAfee proved to be, and FREE AVG hasn't let any nasties through.

I'm only a relative novice, but for what it's worth I once ended up running two anti-virus programmes at the same time and it caused havoc, because they were both on automatic start-up.

I'd be very careful here and I'd also ask AVG if they have any comments regarding how "Benjamin" found his way into your system! They might not have that kind of user-support, but it's worth a try!! http://www.PCGuide.com/ubb/wink.gif http://www.PCGuide.com/ubb/wink.gif

------------------
Cheers!

Mitch Hatfield

Looking out for some signs of Evolution!!

[mjc]

You have Kazaa.....that in and of itself is classified as a worm in my book....it is riddled with spyware, trys to take over your machine and is very buggy to boot....

But how it got on your machine....Benjamin is a Kazaa worm, desguised as one of the music, game, what ever files you downloaded......
http://securityresponse.symantec.com/avcenter/venc/data/w32.benjamin.worm.html
http://www.newsbytes.com/news/02/176684.html
http://www.viruslist.com/eng/viruslist.html?id=49790

Also make sure that you are checking all extensions...or add the extnesions of the files you download...like mp3 to the list.
------------------
mjc
Links list:Computer Links (http://www.dreamwater.org/tech/mjc/index.htm)

Celts are the men that heaven made mad, For all their battles are merry and their songs are all sad.


[This message has been edited by mjc (edited 05-25-2002).]

[sea69]

yep- I tell people, and TELL people about kazaa..... even though morpheus is slower and isn't what it once was at least it doesn't try to hook you into a hidden server and make you a part of an invisable network as well as place and store files on your pc and turn it on and off- aggreagate your internet connection...{{without your permission}}

should I go on??

~rant~[/end]

http://www.PCGuide.com/ubb/wink.gif


------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/index.html)

[This message has been edited by sea69 (edited 05-25-2002).]

[kfh]

Hi All,
As Yoda says run two Av's, I was advised that here.

ErnieK.
Since I was advised I'm running Nav 2002 and Avg free version.
No conflicts so far. OS XP.
http://www.PCGuide.com/ubb/biggrin.gif
kfh.


------------------
-------
Sequitur Patrem Non Passibus Aequis

[redduffer999]

Hi again.

Ses69 - What's the thing with Kazaa? I've seen so much bad press. I'm showing my ignorance here. What is the underlying point of Kazaa? What is it really up to?



------------------
redduffer999

[sea69]

[url=http://www.google.com/search?hl=en&ie=UTF8&oe=UTF8&q=kazaa%2C+brilliant%2C+spyware]Read Mep/url]


http://www.PCGuide.com/ubb/wink.gif

[YODA74]

Sorry ErnieK, I would of gotten back to you sooner but I had a total system Crash and had to re-format and re-install. and am still doing that but yes you can run two Anti virus programs just don't run them at the exact same time. Or at least I can't I do have problems sometimes with that.

------------------
YODA74@windows-sucks.com
CCMR (http://www.dreamwater.net/tech/yoda74/index.html)

PUSH TO TEST. RELEASE TO DETONATE.
[Closed captioned for the thinking impaired.]

[john5211]

Hey all,

Regarding running multiple virus scanners, I find it useful to run one "regular" scanner (e.g. Norton, AVG, whatever) and use an online scanner from time to time (e.g. http://housecall.antivirus.com ).

This provides the advantage of having two scanners to without having to waste any system resources/disk space.

John

[sea69]

read me (http://www.google.com/search?hl=en&ie=UTF8&oe=UTF8&q=kazaa%2C+brilliant%2C+spyware)

http://www.PCGuide.com/ubb/eek.gif

[Mitch Hatfield]

Hi again Reduffer
U,ve probably got all the info u need by now, but u might find this about this KaZaa worm to be of some interest:

1. Trend Micro Updates - Pattern File and Scan Engine Updates
------------------------------------------------------------------------
PATTERN FILE: 289 http://www.antivirus.com/download/pattern.asp
SCAN ENGINE: 6.150 http://www.antivirus.com/download/engines/

2. WORM_BENJAMIN.A Makes Itself Known (Low Risk)
------------------------------------------------------------------------
This destructive worm propagates through the Kazaa network, a peer-to-peer file exchange network. It runs in the

background and continuously drops slightly altered copies of itself, filling infected hard disk drives. It also

repetitively connects to a remote site, congesting an infected system's network connection.

It drops copies of itself with different filenames and copies that are padded with data, making the size of these

dropped files vary. Some of the dropped files are corrupted copies. These corrupted samples cannot be processed

accordingly and do not pose any threat to infected systems. Also, a significant portion of the headers of these

corrupted files are damaged, therefore antivirus software is unable to identify them.

Upon execution, this worm stays in memory to continuously process its destructive payload, which fills an infected

user's hard disk drive for as long as Windows permits the creation of files.

If you would like to scan your computer for WORM_BENJAMIN.A or thousands of worms, viruses, Trojans and malicious

code, visit HouseCall, Trend Micro's free online virus scanner at: http://housecall.antivirus.com/

WORM_BENJAMIN.A is detected and cleaned by Trend Micro pattern file #284 and above.

For additional information about WORM_BENJAMIN.A, please visit Trend Micro at:

"http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_BENJAMIN.A"

The suggestion of an occasional use of HouseCall-free-is in line with my own practise, even though I am a relative greenhorn! http://www.PCGuide.com/ubb/smile.gif http://www.PCGuide.com/ubb/smile.gif

------------------
Cheers!

Mitch Hatfield

Looking out for some signs of Evolution!!

[redduffer999]

Thanks for all the advise guys. I didnt realise there was so much going on in the background ref:Kazaa..
Just ran House doctor & got clean bill of health. Looks like nothing in this world is for free after all. http://www.PCGuide.com/ubb/smile.gif



------------------
redduffer999

[ErnieK]

yes you can run two Anti virus programs just don't run them at the exact same time. Or at least I can't I do have problems sometimes with that.
Since I was advised I'm running Nav 2002 and Avg free version.
No conflicts so far. OS XP.

To set up 2 (two) AV's at the same time would I have to have one run at boot up and one on manual scan? (Dual Boot 98 & XP -Fat 32)


------------------
Ernie

[Paul Komski]

I used to run NAV and AVG simulaneously and never had problems. To cut down on resource usage and bootup time I now only run AVG; but I have NAV installed and use it as a 2nd scanner if I am really suspicious about something; after all its just a right-click away.


[This message has been edited by Paul Komski (edited 05-26-2002).]