Virus on my computer - Democratic Underground

jiacinto

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 08:39 PM
Original message

Virus on my computer

Norton tells me that "it is unable to repair file".

Its name is W32.Sobig.F@mm

How do I get rid of it? I am running Norton antivirus to scan the computer now. What else can I do? HELP!

Printer Friendly | Permalink | | Top

gyopsy

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 08:41 PM
Response to Original message

1. W32.Sobig.F@mm ????

Never heard of it. Update Norton quickly and check for any patches your operating system (particurally if its Windows XP) may offer.

Printer Friendly | Permalink | | Top

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 08:41 PM
Response to Original message

2. Try this

http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html

Printer Friendly | Permalink | | Top

Junkdrawer

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 08:42 PM
Response to Original message

3. removal tool

Edited on Tue Aug-19-03 08:44 PM by Junkdrawer

http://www.symantec.com/avcenter/venc/data/w32.sobig.e@mm.removal.tool.html

On edit: This removes the E strain, not the F strain. Sorry.

Printer Friendly | Permalink | | Top

jiacinto

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 08:46 PM
Response to Reply #3

4. I am using it now

Printer Friendly | Permalink | | Top

Junkdrawer

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 08:51 PM
Response to Reply #4

5. I gave you a link to the E tool, not the F tool...

I don't think running the E tool will do any harm, but here's the link to the F tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.removal.tool.html

Printer Friendly | Permalink | | Top

jiacinto

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 08:53 PM
Response to Reply #5

6. I just noticed it

I am downloading it now.

Printer Friendly | Permalink | | Top

ima_sinnic

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 09:09 PM
Response to Original message

7. here is more info on W32/Sobig.f@MM, with how to fix

http://vil.nai.com/vil/content/v_100561.htm

"In common with previous W32/Sobig variants, this variant contains a date triggered self-termination routine. If the date is September 10th 2003 or later, the worm will no longer propagate."

The "manual removal instructions" look horrible! like only a techie could really figure them out.

good luck!

Printer Friendly | Permalink | | Top

jiacinto

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 09:12 PM
Response to Reply #7

8. Well

I used the Symantec tool to get rid of it.,

Printer Friendly | Permalink | | Top

ima_sinnic

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 09:20 PM
Response to Reply #8

9. excellent!

I've been receiving e-mails all day telling me "my" messages were undeliverable because they contained a virus. But I never sent those messages! The worm took my e-mail addy out of one or more other people's computers and tried to send e-mails as though from "me." I did finally just receive one with subject line "Wicked screensaver"--one of the ones in the list to avoid! I felt fortunate I had read the list (in the link in my post above) because the sender was not someone suspicious--unknown but in my same department at the university.

Printer Friendly | Permalink | | Top

jiacinto

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 09:27 PM
Response to Reply #9

10. I think it's gone

But I wonder what happened.

Printer Friendly | Permalink | | Top

charlie

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-19-03 10:06 PM
Response to Reply #10

11. Email

You'll get hit again and again if you don't take take to not open attachments to your email. If you can't verify that a file is from someone you trust (and someone savvy enough not to pass on infected files), delete it. If your email client is configured to automatically open attachments, you'll need to reset it.

Printer Friendly | Permalink | | Top

DU AdBot (1000+ posts)

Fri May 03rd 2024, 03:10 AM
Response to Original message

Advertisements [?]

Top

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators

Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.