** That worm thing **

[Marshall]

I got an email yesterday that said the attachment contained hex, asii
stuff, etc. I knew in my heart it was evil but it came from a business
associate and I was currious. I opened it with outlook express, not the
double click seperate pane open but the single clickie. It was full of
code (I knew in my heart it would be) and I closed it. I have run my
updated AV that says it can find the worm that I found out was loose
about an hour after the above happened. I have noticed only one new
behavior other than the normal crashes, hangs, and corruption that you
experience with windows. A window called csc notification has run a few
times at shutdown.

Am I infected?

 

[Colon Terminus]

I got an email yesterday that said the attachment contained hex, asii
stuff, etc. I knew in my heart it was evil but it came from a business
associate and I was currious. I opened it with outlook express, not the
double click seperate pane open but the single clickie. It was full of
code (I knew in my heart it would be) and I closed it. I have run my
updated AV that says it can find the worm that I found out was loose
about an hour after the above happened. I have noticed only one new
behavior other than the normal crashes, hangs, and corruption that you
experience with windows. A window called csc notification has run a few
times at shutdown.

Am I infected?

Probably not. "That worm thing" requires that you execute an attached file,
sounds like you didn't do that. The "csc notification" thingie is NOT a
Windows 2000 problem, it is most related to your video driver. You got an
ATI video card?

You speak of "normal crashes, hangs and corruption that you esperience with
windows." This is NOT normal. Windows 2000 is an extremely stable operating
system. If you are experiencing crashes, hangs and corruption, then
something is wrong. Do you regularly run a "Scumware" cleanup program such
as AD Aware or Spybot Search and Destroy? Are you certain your system is
free of trojans? Your virus scanner/definitions are up to date?

The workstation I'm posting from has been up and running for 97 days
09:41:23 (copied/pasted directly from a Status Info program). That's 97
days, 9 hours, 41 minutes and 23 seconds continuously without a restart.
That's not at all indicitave of "normal crashes, hangs and corruption".
Something is terribly wrong with your system.

 

[Jim Byrd]

Hi Marshall - Note that there's a standalone cleaning tool available at the
ca. site: http://www3.ca.com/virusinfo/virus.aspx?ID=38102

"To download ClnShimg.zip - a utility that cleans a local machine affected
by Win32.Mydoom.A and its variants, please click here. "
http://www3.ca.com/Files/VirusInformationAndPrevention/clnshimg.zip

"This utility may be especially useful for those who either do not use CA
Antivirus solutions, or who may be using products based on older technology
that does not support system cleaning. Please view the Removal Instructions
for your CA Antivirus Solution (below) to ascertain whether you require the
cleaning utility."


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Marshall]

How right you are. It is an ati card!

Yea I got S&D for spy stuff and AGV and Fprot for virus protection.

The comment about the normal hangs etc was an attempt at humor.

Take care.