PDA

View Full Version : How Do I Warn About Viruses



pahknee
06-23-2003, 04:32 AM
:angry: I have a worm on my system that seems pretty hard to get rid of have gone to Symantec (I have a registered copy of Norton's AntiVirus program) and have been told that the program allows someone to have access to my machine and control. It states that it usually comes from a P2P with files (maybe they mean when I downloaded a file it had the worm with it).

I do not want others affected I want it fixed so that I can back to business. I am going to cut off my sharing and try to find other help besides Symantec so please understand why I am not sharing if I need any files you have got.

Any help would be greatly appreciated. :(

MagicNakor
06-23-2003, 04:50 AM
What's the name of it? ;) That kind of information'll be a lot of help to people who want to help you out.

:ninja:

Ad
06-23-2003, 05:45 AM
Magicnakor loves the ;) ;) ;) smiley alot :P

zapjb
06-23-2003, 08:59 AM
And they're gone. Poof. Let's see theres over 12,000 members with zero posts. I wonder how thousands have 1-5 posts. Probably another 10,000. :lol:

Bender
06-23-2003, 09:15 AM
Originally posted by pahknee@23 June 2003 - 06:32
:angry: I have a worm on my system that seems pretty hard to get rid of have gone to Symantec (I have a registered copy of Norton's AntiVirus program) and have been told that the program allows someone to have access to my machine and control.  It states that it usually comes from a P2P with files (maybe they mean when I downloaded a file it had the worm with it).

I do not want others affected I want it fixed so that I can back to business.  I am going to cut off my sharing and try to find other help besides Symantec so please understand why I am not sharing if I need any files you have got.

Any help would be greatly appreciated.  :(
I'm not an expert on this, but from what I understand you can only get viruses from p2p when you download software (correct me if I'm wrong, anybody ;) ).

Since you have a registered version of Norton, I think you could get help on the Symantec Homepage (http://www.symantec.com/).
Did you update your Norton regulary, by the way?

theprisoner
06-24-2003, 10:55 PM
Well, no you cant get virus unless you download BUT if u dont have a firewall people on the p2p or anywhere on the internet for that matter, can find your ip and listen to your ports(just as bad as a backdoor) and sometimes send you a trojan. But, as long as you have a AV and firewall, you should be just fine :) .

Switeck
06-24-2003, 11:50 PM
Originally posted by Bender@23 June 2003 - 04:15
I'm not an expert on this, but from what I understand you can only get viruses from p2p when you download software (correct me if I'm wrong, anybody ;) ).

Since you have a registered version of Norton, I think you could get help on the Symantec Homepage (http://www.symantec.com/).
Did you update your Norton regulary, by the way?I've gotten a virus from a MP3 file -- it was called "MP3" but it was actually a "VBS" virus.

Windows Media Player (v6.4 or so...) ran it just fine without a warning even!

Microsoft Windows is really friendly about handling mis-named files. If it can detect what filetype the file REALLY is, it will often redirect it and run it without even bothering the user about the 'problem'...

Some of the p2p viruses found on Kazaa are so new that Norton and McAfee haven't made detection/removal methods for them yet.

theprisoner
06-25-2003, 12:50 AM
no, you cant get a virus from a mp3 file, either it was a double extension(ex-mp3.vbs) or it was a vbs that was renamed mp3. I would find out its real extension BEFORE excuting the file. And pahknee,
program allows someone to have access to my machine and control is called a backdoor and although common on p2p you can get them anywhere(ex- sites, email and even just being on the internet without a firewall), so they are not strickly p2p viruses. Also
I am going to cut off my sharing and try to find other help besides Symantec so please understand why I am not sharing if I need any files you have got If your so damn worried, i wouldnt download either. You cant get a virus uploading <_<

Switeck
06-25-2003, 04:22 AM
Originally posted by theprisoner@24 June 2003 - 19:50
no, you cant get a virus from a mp3 file, either it was a double extension(ex-mp3.vbs) or it was a vbs that was renamed mp3. I would find out its real extension BEFORE excuting the file.It was a "something.VBS" file that was renamed to "something.MP3" file.

Sure, it was really a VBS file still but with the MP3 extension -- But due to M&#036;&#39;s Media Player&#39;s tendancy to run anything it can run without warning that a file&#39;s mis-named, a virus CAN infect a computer even if it IS named "something.MP3"&#33;

It&#39;s not a simple matter to find out a file&#39;s &#39;real extension&#39; because you&#39;d have to know that file&#39;s entire history and/or read its internal structure with a hex editor or a program that deciphers a file&#39;s structure without actually executing any code found in it.

Perhaps I should email you a copy of this "MP3" file so you can run it in media player if you don&#39;t believe me. :D

I&#39;ve also seen numerous "AVI" and "MPG" files that are actually ASF/RM/WMV files which launch IE to go to a &#39;sponsored&#39; website. To me, it&#39;s almost a form of trojan -- because it is neither what I expect or desire out of an AVI or MPG file.

theprisoner
06-25-2003, 04:45 AM
Yes, if it is renamed it still can excute but normally im not one to use Windows Media Player(i use musicmatch Jukebox) and have never really had any problems with MP3 but if it doesnt run on my player(or show up as a musicmatch icon, just as a window), i delete it right away. I would personally stop using windows media player ;). Also i heard that k-lite filters renamed those as bad files. But thanks for the info.
Some of the p2p viruses found on Kazaa are so new that Norton and McAfee haven&#39;t made detection/removal methods for them yet. Yes there are many new ones everyday but most are similar to another virus therefore, they are detected as that virus. By the way, what virus did it turn out to be?

XStacy
06-25-2003, 05:04 AM
Originally posted by theprisoner@25 June 2003 - 00:50

I am going to cut off my sharing and try to find other help besides Symantec so please understand why I am not sharing if I need any files you have got If your so damn worried, i wouldnt download either. You cant get a virus uploading <_<
He&#39;s probably not damn worried. Of course you can&#39;t get a virus from uploading, but you sure can spread them by uploading. <_< :rolleyes: Since he does have a worm/virus, he would be spreading them if he didnt cut off his uploading.


edit: typo

theprisoner
06-25-2003, 05:18 AM
My point is that if he has a bug and its not letting ppl upload- he shouldnt download either.... <_<