GOT A VIRUS --HELP

[YODA74]

Ok I know I'm busted never had virus it is in quarentine.cannot be repaired
is in C:\windows\temp internet files\content.IE5\4zczkjed\script-nohide[1].htm How do I procede from here?? http://www.PCGuide.com/ubb/frown.gif

[geebee76]

Hey Yoda,

What OS do you have and if this is a Norton AV message, what version of NAV do you have. Found a few refrences for it but it seems to depend on OS and NAV version, as to what course of action to take. http://www.PCGuide.com/ubb/frown.gif

------------------
You are making progress if each mistake is a new one!

Sig from Here (http://www.oneliners-and-proverbs.com/)

geebee76@hotmail.com

[YODA74]

Windows ME norton anti virus 2001 [nav 2001 7.0] it is in Quarintine ran a scan of drive did not pick up any thing can you just delete or???? Damn I can't beleive I did this, HE He! {just want it gone}Live and learn. http://www.PCGuide.com/ubb/smile.gif

[geebee76]

Hi Yoda,

Found this Article (http://service1.symantec.com/SUPPORT/nav.nsf/docid/2000041213443506) at Symantec. Following the instructions will get rid of it but they also say only remove this file if you don't need it. EH!!

Good Luck http://www.PCGuide.com/ubb/smile.gif

------------------
You are making progress if each mistake is a new one!

Sig from Here (http://www.oneliners-and-proverbs.com/)

geebee76@hotmail.com

[kayofcircles]

Yoda ...EEEK! Just wanted you to know that I am sending "get well soonest" wishes. Since you have the Norton, you don't need the fprot stuff, right? Never went and got that..remember reading here that it was for virus removal in DOS. Keep us posted...I am anxious for you.

[YODA74]

I want to thank you all for the help,if you don't get your self in a predicument with the computer your not having fun. But I promise I won't do it again HE HE! I sent it off to SARC I looked thru virus protect i was covered also looked thru files and folders keeps coming up ( not a valid file or folder ) so i guess i do not need it I'm not going to wait a week for SARC. So i will delete it today. if you don't see a post from me later today then you'll know I needed the file THANK YOU ROB for the E-Mail http://www.PCGuide.com/ubb/biggrin.gif http://www.PCGuide.com/ubb/eek.gif

[This message has been edited by YODA74 (edited 09-20-2001).]

[YODA74]

By George I think I got it I'm still here so far run a new scan after I deleted the thing aparently did not need the file??hum.Thanks again ya'll And thanks for the get well wishes KayIt worked. http://www.PCGuide.com/ubb/smile.gif http://www.PCGuide.com/ubb/biggrin.gif http://www.PCGuide.com/ubb/wink.gif

[kayofcircles]

WHEW! Really glad to see you still here! http://www.PCGuide.com/ubb/biggrin.gif http://www.PCGuide.com/ubb/biggrin.gif

[Whyzman]

Yoda,

Where did you pick the little bugger up from? I realize that I'm being a little bit nosy! (humor is a good thing) Did you get thru Email preview?

Gimme all the disgusting details will ya?

And, what in the world are "shares" that they're talking about. And, how exactly does one pick the thing up from an infected web site?

I read the stuff at Symantec but found Techno-language and abbreviations that were beyond my frame of reference.

MJC mentioned hits on AZ (I think it was...what is dat?

May all your dealings in life be win/win!

Whyzman

[mjc]

ZA = ZoneAlarm, a software firewall

shares = file sharing, unless you want it between local computers it is undesireable...

It can be picked up from an infected website by means of AutoDownload...the nifty little feature that allows things to automatically download

------------------
mjc
Links list:Computer Links (http://www.dreamwater.org/tech/mjc/index.htm)

Celts are the men that heaven made mad, For all their battles are merry and their songs are all sad.

[Whyzman]

MJC,

Thanks for the Easy-Speak information!! Are we actually talking an infected website, or web server? If Website, how does it go beyond the HTML to get into your file systems?

Thanks again,

May all your dealings in life be win/win!

Whyzman

[iisbob]

MJC is taking about some sites that have an annoying habit of downloading their own small programs to your PC, comet cursor is a good ( bad? ) example, that's why i have auto-downloading in IE turned to " prompt ", so that someone can't sneak a file in on me! I highly recommend this to eveyone!

This is how web virii are spread, if you get an auto downloaded program into your computer, it's just like you opened an attachment in an infected email. The preventative for this is to do as i suggest above, it may seems annoying to get these little messages asking if you want to download this or that, but it can save you ( and everyone else in your address book! ) a lot of headaches!



------------------
iisbob
"640K ought to be enough for anybody. - Bill Gates, 1981"
"Imagination is more important than knowledge. Knowledge is limited. Imagination encircles the world." --Albert Einstein (1879-1955)

[YODA74]

There all right, Wyzman every thing i thought on my puter was secure but come to find out i am running with an open browser? foulish me. No your not being nosey you know what i do for a living not as fun as you might think you know to get some one (Your Dad will tell you the same thing)you have to be in the same mind set well I surfed into a territory that the way this clown thinks I cannot believe these people exist, was some pretty explisid and perverted and i mean Brutal porn and all i was doing was surfing and then wham bells and whistles hit the screen glad i had my NAV running (pennesillan)so in short watch where you surf and make sure you are vaccinated for rabbies.HE HE HE! I need a new JOB! http://www.PCGuide.com/ubb/wink.gif

[kayofcircles]

iisbob Please direct ye stupid one to exact location for doing this: "auto-downloading in IE turned to " prompt ""

Also, sorry to go off topic, but have you guys noticed a VAST increase in the number of ZA pings lately?? When I first installed it, I was thinking that I didn't get the huge number of pings I had heard about since I am on lowly dialup, but day before yesterday was up in the over 300 range by the time I finished surfing...big increase over a "norm" for the last few weeks of approx 30.

[YODA74]

Not sure what iisbob was talking about but want to find out i could not find on my puter? did just get back from store bought a book commputer shopping have not read yet but has an artical on Internet security and yes I have noticed a lot of activity on ZA latley mine jumped from about 75 to about 7oo hits in less than a week?? gee I wonder if it has any thing to do with the government trying to implament security on the net ?? I Know It could not be becouse I have been in strange Zones lately> HEH HEH HEH? http://www.PCGuide.com/ubb/biggrin.gif And KAY Your not YEE Stupid your like I am can't figure out the easy things that go along with puters !

[This message has been edited by YODA74 (edited 09-21-2001).]

[mjc]

The increase in hits on ZA is due directly to nimda...it is designed to hammer a way at every computer connected to a network until it finds a way in...which of course ZA is designed to detect and stop....

------------------
mjc
Links list:Computer Links (http://www.dreamwater.org/tech/mjc/index.htm)

Celts are the men that heaven made mad, For all their battles are merry and their songs are all sad.

[kayofcircles]

Yoda I just went to Tools (in this browser window), Internet Options, Advanced tab and found a whole lot of scary stuff in mine. Like a check mark in "Enable Install on demand"...that doesn't sound good! So, I am off to do some checking and maybe some changing..if you don't hear from me for awhile (as you said about you above), that's what happened. I think I am all right with what iisbob was talking about above because I get a popup window from time to time wanting to know whether or not I want to download this or that...I always say no.

[YODA74]

I'm not really sure what a lot of the stuff that should be checked is or isn't (not sure what some of it means) there's another section you'll want to check out to KAY in bottom right hand corner of your screen it says Internet with picture of the world double click it then click on custom brings up some more confusing things . http://www.PCGuide.com/ubb/smile.gif SORRY About the double I need to fix this mouse

[This message has been edited by YODA74 (edited 09-21-2001).]

[Donna]

I hope i'm not steppingon anyones toe's , but if you go to www.pcpitstop.com (http://www.pcpitstop.com) and run their tests, they will give you alot of tips on your computer security. They will tell you how you can fix your security settings or you can run the auto fixes. I thought i was pretty secure, but found out that i was not. Hope this is of some help for you.
http://www.PCGuide.com/ubb/smile.gif
Donna
EDIT: There is also a forum there that you can ask the pitstop people about any suggestions they give you that your not sure about.

[This message has been edited by Donna (edited 09-21-2001).]

[kayofcircles]

Thanks, Donna. I am on my way to try just that...sure could use any advice on what to check or leave unchecked at this point. http://www.PCGuide.com/ubb/smile.gif

[Donna]

kayofcircles
Its been a long time since i ran my first test at pitstop, but i am sure it tells what settings to change.
Hope it helps and if your not sure, Go to the Forum and ask, there pretty good at getting back to you right away.

Tell them Donna sent you.

[Donna]

Forgot to mention, After you run the tests you can email your results to anyone, Some times helps when you don't have a clue what your doing, Good for sending to whomever you get your tech support from for your computer.

[This message has been edited by Donna (edited 09-21-2001).]

[YODA74]

Well hello Donna I hope things are well in CANADA! I've done the pitslop test 4 different times with in a week and I might add never changed a thing and every time it tells me somthing different is wrong I even went so far as to do it the same day 2hrs apart today, (IMHO.) I would not take a bench mark from them seriously.But any way just my opinion.You stay warm up their now hear. http://www.PCGuide.com/ubb/wink.gif

[iisbob]

Sory i didn't get back sooner to ya Kay, but look in your IE options under the security tab-internet, the option you're looking for will be called " installation of desktop items " you have a choice of enable, disable, or prompt-i recommend everyone choose prompt-especially for you YODA http://www.PCGuide.com/ubb/wink.gif this will keep those nasty porn sites you accidentally got on from trying to hook you up on their auto-dial up programs.



------------------
iisbob
"640K ought to be enough for anybody. - Bill Gates, 1981"
"Imagination is more important than knowledge. Knowledge is limited. Imagination encircles the world." --Albert Einstein (1879-1955)

[kayofcircles]

iisbob Thanks...ran out of puter time yesterday, but just found it and it is checked on Prompt. Still need to check on proper settings for some of the other thingies was looking at yesterday, but off to big city for supplies today. Have a good weekend all.

[Dan Mitchell]

[QUOTE]Originally posted by iisbob:
MJC is taking about some sites that have an annoying habit of downloading their own small programs to your PC, comet cursor is a good ( bad? ) example, that's why i have auto-downloading in IE turned to " prompt ", so that someone can't sneak a file in on me! I highly recommend this to eveyone!

iisbob-I have both IE 5.5 & Netscape 4.78 on my machine. I use the NS almost exclusively, except for newsgroups (OE). I found the setting you referred to in IE (along with the million or 2 other options in the same dialogue the majority of which you'd have to be a programmer to fully grasp the ramifications of). Do you happen to know it NS has this same vulnerability? There does not seem to be an option for it under preferences (or for any of the rest of those settings in that area of IE). How can 2 pieces of software which do basically the same thing be so different in terms of these settings? I'm not sure if this means NS just doesn't accept any of the stuff (I mean all these options, not just the desktop thing), or if it accepts all of it, or what?

BTW, this is another example of the questionable manner in which M$ selects their names for things. Does anyone think "Installation of Desktop Items" in any way conveys what this option can actually allow? Must have been named by the same guy who called "cookies" "COOKIES"! http://www.PCGuide.com/ubb/mad.gif

Dan

[iisbob]

Sorry Dan i never really cared for Netscape-though we do use it some at work. I don't use it on any of my home machines, don't even have it installed ( even went so far as to cleanse my registry of any mention of it ) so i can't really tell you about it.

I usually use either Opera or IE, sometimes i even use Mozilla. So you'll have to wait for someone else who is famaliar with Netscape answer you on that one. http://www.PCGuide.com/ubb/smile.gif

------------------
iisbob
"640K ought to be enough for anybody. - Bill Gates, 1981"
"Imagination is more important than knowledge. Knowledge is limited. Imagination encircles the world." --Albert Einstein (1879-1955)

[Dan Mitchell]

Originally posted by iisbob:
I usually use either Opera or IE, sometimes i even use Mozilla. So you'll have to wait for someone else who is famaliar with Netscape answer you on that one. http://www.PCGuide.com/ubb/smile.gif


iisbob-I recently got a copy of the full version of Opera 5.12. Haven't loaded it yet, I guess you'd recommend doing so? The thing I *REALLY* prefer about NS over IE (other than it not being M$, though now that NS is AOL/Time Warner it's pretty moot) is the way it handles bookmarks. I have thousands, and I've never sorted them in any way. When I want to find one, I just ctrl b (open bookmarks) ctrl f (find) type what I'm looking for & hit enter. As far as I've ever been able to figure out, you can't do this with IE, to find a bookmark you've got to manually LOOK through them (which of course means you've got to *keep them* in some ORDER...too much work!) Can you search bookmarks like this in Opera?

Dan