Re: worm SCO.A removal of from windows98
From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 02/02/04
- Next message: Bill Sanderson: "Re: Virus??"
- Previous message: Bill Sanderson: "Re: Virus?"
- In reply to: SAlly: "worm SCO.A removal of from windows98"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 2 Feb 2004 08:19:37 -0500
Some things are unclear to me: What made you realize that the email
contained a virus?
Liveupdate doesn't scan your machine for viruses. Starting Norton
Anti-Virus, and choosing SCAN and scanning all hard drives is what you want
to do.
Different vendors choose different names for viruses, thus it can be
difficult to find one vendors named bug in another vendors database--that's
why we need to know what software gave the name.
The messages you get back from the "helpful" mailscanner and it's like do
more harm than good. Did you, in fact, send the message? If not, then a)
update your antivirus definitions (via LiveUpdate) b) scan your system (all
files). If you come out clean, you are probably fine, unless this is a
brand-new bug.
This is what is happening. An infected machine somewhere contains both your
address and the address of the person running mailscanner. It has used your
address in the FROM: field to attempt to spread the virus further. Many
current viruses use this trick, and the antivirus vendor gateways need to be
updated so that they don't send these misleading notices to someone who
didn't send the virus.
SCO.A, MyDoom, and Novarg are all names for the same worm.
If you want a second opinion that your system is clean, McAfee's Stinger
removal tool is capable of detecting and removing this worm--and will do no
harm to your system even if nothing is found:
http://vil.nai.com/vil/stinger/
"SAlly" <anonymous@discussions.microsoft.com> wrote in message
news:8b2f01c3e97f$d221e160$a601280a@phx.gbl...
> Hello,
> I opened an email from a friend which later I realised had
> a Virus/worm on 30th Jan. I have received weird emails
> from unknown people,which I have deleted. Emails have been
> sent from me without my knowledge to unknown people. I had
> a email from Mailscanner warning re virus. Report: body
> zip contains worm SCO.A. My email norton anti virus was
> disabled, it is now enabled, & i have run live update
> which says no viruses. I have searched symantec for this
> worm without success. there seems to be no info how to
> remove worms for windows 98, can anyone help me with step
> by step instructions? Thanks
- Next message: Bill Sanderson: "Re: Virus??"
- Previous message: Bill Sanderson: "Re: Virus?"
- In reply to: SAlly: "worm SCO.A removal of from windows98"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|