Preserved Topic: virus??

i was just on the net, not even downloading and norton antivirus pops up telling me some program is running malicous code. It says it's c:\network.vbs And i click repair. It says it can't so i click quarentine. i reboot then go into my quarintine. And it's empty! anyway i search for *.vbs Then i click ONCE on network.vbs to see what folder it's in. It's in C:\WINDOWS\SAMPLES\WSH but right after the SINGLE click on it, another norton window pops up sayin that AP1.vbs is infected with Network.vbs.E So i say to quarentine it, and there is AP1.vbs in my C:\Program Files\Norton AntiVirus\Quarantine\incoming folder, but it's not showing up in my norton quarintine folder.

I can't figure it out. Ive never had a virus, because im careful about what i download. The only thing i think may possibly be is about a week ago i downloaded bearshare. Then i unistalled about 5 minutes of using. I didn't get it to connect so i was reading the msg board, and lots of people said they were getting viruses. Maybe it's something else. I thought windows came with some *.vbs files, and i never got any more from anything else that i knew of.

i only use a modem, but do you think it would be a good idea to use a firewall? i've heard of Zone Alarm, is it any good?

Maybe you got infected with some VBScript virus (i.e. like the one about Anna Kournikova). Did you get any suspicious e-mail with attachment lately? With this type of viruses you can get infected just by looking at the e-mail message (virus body is embeded in HTML as VBScript)...

I heard there was a new exploit with MIME in IE. I don't know the details, but I think you could pick up something small from just surfing.

i haven't got any strange emails, and none had attachents of vbscrips. I rescanned my whole computer and then it found it had a virus and this time it quarentined it. It was vbs.network.e I went to www.norton.com and i found the viruses vbs.network.b and c, but there was no e. The other ones i think just spreaded, they didn't do anything, but infect files and spread to other computers. I think it used the windows sharing exploit.

Max, does the opera email program work good? cause i think outlook is the easiest to get infected with, and thats what i use. It does something to preview the attachments, which runs the virus.

Hmm, I haven't used Opera's e-mail client, so I can't make any comments about it (it's best to try it by yourself and see if it fits). And as far as Outlook Express is concerned, you can turn off the preview pane so that messages aren't showed automatically by going to "View / Layout..." menu.

when I get viruses I generally cold boot using a clean dos boot disk then insert a McAfee viruscan disk and scan my hard drives and MBR...this method generally always finds and fixes all virus problems....I haven't had one virus slip by that method of cleaning...

I've said this before. I'm using AVP, which comes with AVP Monitor that is always running (resident) and blocks all viruses before they can infect your computer...



[This message has been edited by mr.maX (edited 04-10-2001).]

The poster has demanded we remove all his contributions, less he takes legal action.
We have done so.
Now Tyberius Prime expects him to start complaining that we removed his 'free speech' since this message will replace all of his posts, past and future.
Don't follow his example - seek real life help first.

ZoneAlarm is better than BlackICE, because ZoneAlarm can make *all* ports stealth/invisible (BlackICE cannot make port 113 stealth). Also, ZoneAlarm can control what programs can access intranet/internet...

I agree MrMax....I love AVP and ZoneAlarm.

The MIME you are talking about in IE has a patch at

http://www.microsoft.com/windows/ie/download/critical/Q290108/default.asp


you may want to read this :
http://www.microsoft.com/technet/security/bulletin/MS01-020.asp

I like the guys page and info found on it that they gave credit to for finding this problem and it has a place on each subject to click for English ~YAY~
http://www.kriptopolis.com/






[This message has been edited by Shiiizzzam (edited 04-10-2001).]