I got wormed

[chequita guevara]

So I come back from watching TV to see that Norton Internet Security is asking me about an outbound TCP request. Crud. I've got a worm.

I then see the notice from Norton AntiVirus, I've got three infected files on my system drive. "Sweetheart? Did you download any files today?" -- "Yeah, a couple things off KaZaA." --"'Kay, thanks."

NAV tells me its a worm that exploits a security hole in WinXP that I had patched earlier this year. No biggie, right? So why was it able to execute then? NAV found the files and I deleted them. Better run a full system scan to be sure. That takes all night.

Wake up this morning to NAV having crashed. Restart, NAV's not working. It tells me it's been altered.

Oh great, worms are fighting back.

Now I have to uninstall and reinstall NAV.

Not happy. Not happy at all. I rebooted from the CD-ROM and am running as much of a scan as I can, but it can only access the FAT and FAT32 drives. The system drive and several other important drives are NTFS. :sigh:

Crap, crap, crap.

Wonder what I'm gonna see when I get home from work.

[MOBIUS]

There I was thinking that this was in some way linked to your Dog avatar...

[chequita guevara]

It's a dingo.

[Q Classic]

it's good for a new owner to take her pet to the vet to de-worm him.

how did bg trick you into going?

there's always the reformat/reboot/reinstall method.

[Lefty Scaevola]

Nope, it is part of the Capitalist conspiracy to undermine communism. Next we will have Cossacks and and White Russians invade his apartment.

[Lefty Scaevola]

And next time get an AV version with automatic download scan and keep it updated and enabled. This is maditory when you allow mere mortals to use your machine.

[chequita guevara]

MaxPC rates NAV as best. It has automatic virus updates and more frequently than any of the others.

I've been pretty hapy with Norton over all. NIS kept the worm from TCPing out, and NAV did find the infection, but I've got 10 drives and almost 30gigs of stuff to scan.

At least my boot records are clean.

[SlowwHand]

White Russians? Good drinking.







That avatar looks like crap, squashed dog OR dingo.

[uh Clem]

Ten drives?? How much downloading do you guys do?

[alva]

What's even stranger; 10 drives for a merely 30 G???

My whole system takes about an hour to scan ( 120G)

[Urban Ranger]

Re: I got wormed

Originally posted by chegitz guevara
NAV tells me its a worm that exploits a security hole in WinXP that I had patched earlier this year. No biggie, right? So why was it able to execute then? NAV found the files and I deleted them. Better run a full system scan to be sure. That takes all night.

Patched, yes, but just partially, which isn't enough.

When did you update last time?

[Provost Harrison]

He's probably got some cheap drives and is using a RAID configuration. It's the speed he is after

[chequita guevara]

I have my drives partitioned into things like:
disk 1 (27 gig)
system (windows)
system (winxp)
apps (winxp)
data (winxp)
scratch (for photoshop) (winxp)
temp (shared)
games (win 89)

disk 2 (17 gig)
swap (shared)
downloads (shared)

If you do the math, there's a total of 44 gig, but NAV can only scan the drives it can see, and I the two operating systems can only see particular drives. I also have NAV scan every file, not merely the executables. That takes a a lot longer.

[Urban Ranger]

The RPC flaw doesn't affect W9x systems.

[chequita guevara]

Re: Re: I got wormed

Originally posted by Urban Ranger
Patched, yes, but just partially, which isn't enough.

When did you update last time?

Last night, as a matter of fact. Whenever WinUpdate tells me to upgrade, I do it.