Chook
2003-Dec-01, 10:44 PM
My computer has been badly infected with a Trojan Virus, despite being "protected" by Norton Anti-virus – and I want to tell you what happened so you don’t also get caught.
I opened Incredimail, last night, and I saw that I had received an official updated Security Patch from Microsoft which, they stated, was an upgrade against all known security holes in their products.
So I invoked the Attached file and, soon after, hundreds of E-mail messages started being received back as undeliverable, presumable rejected by the recipient’s anti-virus block.
Attempting to use Norton’s Anti-virus prompted the error message "Memory Access Violation in Module kernel 32 at 6534:28497941".
I asked Google to find Virus Scan and I found a site that claimed, "as a service", to scan and repair an infected computer. After a couple of hours’ downloading their files and scanning 66,476 files (slowed by constantly receiving returned e-mails) they found 21 files infected with the Win32HLLM.Gibe.2 virus. But when I requested a repair – a hefty payment was required, so I declined.
By the time I had found another promising free-anti-virus scan-and-repair site http://housecall.trendmicro.com/housecall/.../start_corp.asp (http://housecall.trendmicro.com/housecall/start_corp.asp)
the time was nearly 1am in the morning so I went to bed, got up again at 5am and, to my surprise, I was able to re-install, live-upgrade and successfully run Norton’s Anti-virus program. It was not able to repair the infected files but quarantined them. Norton claimed the Virus was W32SWEN.ACMM.
Anyway – the purpose of this message is:
BE VERY CAREFUL IF YOU RECEIVE AN E-MAIL PURPORTED ORIGINATING FROM MICROSOFT CLAIMING TO BE A SECURITY UPDATE – WITH ATTACHED FILE. It could be a virus.
I opened Incredimail, last night, and I saw that I had received an official updated Security Patch from Microsoft which, they stated, was an upgrade against all known security holes in their products.
So I invoked the Attached file and, soon after, hundreds of E-mail messages started being received back as undeliverable, presumable rejected by the recipient’s anti-virus block.
Attempting to use Norton’s Anti-virus prompted the error message "Memory Access Violation in Module kernel 32 at 6534:28497941".
I asked Google to find Virus Scan and I found a site that claimed, "as a service", to scan and repair an infected computer. After a couple of hours’ downloading their files and scanning 66,476 files (slowed by constantly receiving returned e-mails) they found 21 files infected with the Win32HLLM.Gibe.2 virus. But when I requested a repair – a hefty payment was required, so I declined.
By the time I had found another promising free-anti-virus scan-and-repair site http://housecall.trendmicro.com/housecall/.../start_corp.asp (http://housecall.trendmicro.com/housecall/start_corp.asp)
the time was nearly 1am in the morning so I went to bed, got up again at 5am and, to my surprise, I was able to re-install, live-upgrade and successfully run Norton’s Anti-virus program. It was not able to repair the infected files but quarantined them. Norton claimed the Virus was W32SWEN.ACMM.
Anyway – the purpose of this message is:
BE VERY CAREFUL IF YOU RECEIVE AN E-MAIL PURPORTED ORIGINATING FROM MICROSOFT CLAIMING TO BE A SECURITY UPDATE – WITH ATTACHED FILE. It could be a virus.