help may be needed

[Hannibal]

I have a P4 with XP Pro and DSL through a Netgear router. The router's
firewall is up, but the built in XP firewall is not in use. I use
Netscape 7.1.

I clicked on a newsgroup message, and the attachment window showed as a
file in c:\documents and settings\bots. The directory doesn't exist on
my hard drive. I shut down Netscape Messenger. Since my taskbar was
misbehaving - showing 11 copies of Netscape and collapsing before I
could click any of them - I restarted my computer. I ran Norton
Antivirus and found no infections. I ran Norton LiveUpdate - it only
updated LiveReg - then ran AV again, and found no infections. My
computer seems to be behaving normally.

I am still concerned that I may have been infected. Can anyone give me
some insight or offer any suggestions as to how I can put my mind to rest?

Feel free to email me at (e-mail address removed).

Hannibal

 

[Hannibal]

I've just done a search of my computer, and there is a c:\program
files\shared files\bots\ directory. The only program within it could
not be deleted because it is in use. Am I infected?

Hannibal

 

[Roger Parks]

1. Sounds like a script or Java ploy - which would not be detected by
Norton, and would be ignored by Netgear.
2. Post a link to the message.
3. You're probably o.k. - but if you do not have the latest JAVA update, you
are vulnerable to some kinds of damage.
4. Spend some time with your "settings" and configure for more safety (Can't
help you; I don't have Netscape)

 

[Hannibal]

1. Sounds like a script or Java ploy - which would not be detected by
Norton, and would be ignored by Netgear.
2. Post a link to the message.
3. You're probably o.k. - but if you do not have the latest JAVA update, you
are vulnerable to some kinds of damage.
4. Spend some time with your "settings" and configure for more safety (Can't
help you; I don't have Netscape)

I have only noticed one bit of odd behaviour from my computer - it no
longer goes into standby. The video still shuts off after 15 minutes,
but the power and HD activity lights don't start blinking after 20.
This may have started after I established the LAN connection to my
router, so the script/Java ploy may not have anything to do with it.

My biggest concern is what happens when I use my browser to do internet
banking or internet credit card maintenance, or log onto my ISP's
customer service website. All three involve usernames and passwords.
Those are stored on my HD in encrypted form anyway, but accessing those
sites may decrypt them for a malicious person on the other end.

I've tried looking in the vinavbar subdirectory and found it empty, yet
when I try to remove it I am told I can't because it is in use. This is
true even if I disable my LAN (internet) connection or use a DOS command
prompt.

Incidentally, Norton's online security check found nothing.

Hannibal