NASTY VIRUS TODAY - W32.Klez.E@mm

Brangwen · March 15th, 2002, 02:42 PM

JnMHayes:

Hey, if we all ("the experts ... "

) can learn from each other, and rely upon our fellow members for assistance, then this forum accomplishes a major reason for existing!

Brangwen

BTW: My first post was simply a copy / paste email that I sent to family and friends on my email list who might not know what to look for or what to do if they received something other than a hoax virus.

I now have a couple of infected files in my NAV Quarantine Box: do I just leave them there? They cannot be "repaired, and Norton's Help doesn't address this issue from what I've seen.

surreal · March 15th, 2002, 03:05 PM

Quote:

Summary: All you have to do is use outlook to get nailed, you don't have to click on the attachment.

Great, just when I'm really struggeling trying to adjust to Outlook,,

(nope I do not use the preview pane.. does that help?)

Fingers · March 15th, 2002, 08:54 PM

Quote:

Summary: All you have to do is use outlook to get nailed, you don't have to click on the attachment.

Yep, Outlook does configure itself to automatically open attachments in the Preview Pane, but you don't have to (nor should you) leave OE configured that way. Go to Tools>Options>Read and UNCHECK the option to "Automatically download message when viewing in the Preview Pane"

CERuppel · March 15th, 2002, 09:33 PM

Thanz fingers. That was one I had forgotten to do on this system (for a friend).

I use Outlook express and IE.
Why?
Because it's what most of the people that have home computers have and use.
And ask me to fix...

Brangwen · March 15th, 2002, 11:02 PM

Fingers:

Thanks for the suggestion ... I will find out "how" that works when next I download messages. Again, I simply scrolled to the first message of many to begin reading, as I customarily do. As I was scrolling up the 10 or so emails, the infected email simply being highlighted as I passed over it on my way to the first message set off the Norton alarm.

I'm not certain how that will change by modifying the option as you suggest. I suspect an infected message will still be at least highlighted ... I never even opened the infected email, never mind not opening the attachment!

In any event, my question of relevant concern now: "What do I do with infected file in NAV Quarantine? Just leave the bugger locked away?" NAV doesn't seem to address this issue.

Anyone know the answer?

Thx.

Brangwen

Richard Cranium · March 15th, 2002, 11:11 PM

MDdan & Fingers have the answer.

NEVER have the "Preview" option checked in Outlook, this is a opening that allows bugs direct access to the machine, similar to booting with an infected floppy in the drive.

ASH-Can Outlook and get an alternative, Eudora is reputed by lots as the one to have, I've never used it myself.

Since I got the self-named "Chinese Click-of-Death" virus that killed 2 hard drives, I only use Yahoo & Go.com e-mail, or the one at work with Titanium firewalls.

http://www.eudora.com/email/index.html

As far as getting the stuff off the drive, I haven't a clue.

Fingers · March 15th, 2002, 11:50 PM

The "Preview Pane" isn't necessarily the culprit, it's the option to "Automatically download messages..." option that will kill you. I always use the preview pane in Outlook Express, and like Brangwen stated, simply highlighting the message allowsthe text to be viewed in the preview pane. The danger is the "Automatically download..." option because it cues atachments to be downloaded and opened even if the message is only highlighted briefly.... or by mistake.

Brangwen, you actually weren't in any danger of being infected, because Norton's AV (MailSafe) actually scans the emails while they are being downloaded, not just when they opened.

As for the virus's in Quarantine, simply open the NAV Quarantine manager and delete them.

Brangwen · March 16th, 2002, 12:59 AM

Doc:

Thanks for the input ... I tried Eudora once but my low level of intellectual acumen precluded me from figuring out how to use it!

Fingers: wrote ...

Quote:

As for the virus's in Quarantine, simply open the NAV Quarantine manager and delete them.

When I clicked to do this, NAV prompts: "These Files Have Not or Cannot Be Repaired. Are you SURE you want to Restore Them?" This freaked me out! Any comments, mon ami?

Thx for your help!

Brangwen

surreal · March 16th, 2002, 01:06 AM

No! You need to delete them.
Open your quarntine manager and then highlight only.. and then click the RED X You will be asked Are you SURE you want to Delete them? Say yes.

I did it just tonight. and I've gone back to Pegasus. I just tried Outlook and when I got the file I thought it was more of the microsoft junk. I even sent it to Fingers and said, hey did you get this?

Luckily he ignored it

Brangwen · March 16th, 2002, 01:12 AM

Surreal:

Ok. Thanks for the verification.

Quote:

I just tried Outlook and when I got the file I thought it was more of the microsoft junk. I even sent it to Fingers and said, hey did you get this?

You sent the infected email to Fingers? "Holy Moly!"

Scary bugger, isn't it? Like I wrote when I began this thread: my second "real" virus (i.e., not a hoax) in 14 years!

Thx.

Brangwen