virus! help

[S.L.NARASIMHAM]

my AVG free edition with realtime protection turned on warned me that i have
worm/VB.6.AN.
i had a mail form a friend.
opened the mail. it had an attachment--attachments.bhx. i saved it to the
disk and ran an antivirus scan on it. that was when i was warned.
i didnot open the attachment.
i deleted the attachment and the mail.
30 mts later my daughter while on a chat mentioned that she received a mail
from me with some photos attached. i said no i didnot send them and please
delete them. she did.
when i see the grisoft site ( www.grisoft.com) i donot get any mention of
this worm.how do i get any info on this? am i infected ( guess i am) what is
the remedy?
my AVG free is uptodate.
TIA.
S.L.Narasimham

 

[David H. Lipman]

From: "S.L.NARASIMHAM" <[email protected]>

| my AVG free edition with realtime protection turned on warned me that i have
| worm/VB.6.AN.
| i had a mail form a friend.
| opened the mail. it had an attachment--attachments.bhx. i saved it to the
| disk and ran an antivirus scan on it. that was when i was warned.
| i didnot open the attachment.
| i deleted the attachment and the mail.
| 30 mts later my daughter while on a chat mentioned that she received a mail
| from me with some photos attached. i said no i didnot send them and please
| delete them. she did.
| when i see the grisoft site ( www.grisoft.com) i donot get any mention of
| this worm.how do i get any info on this? am i infected ( guess i am) what is
| the remedy?
| my AVG free is uptodate.
| TIA.
| S.L.Narasimham
|

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

The Grisoft AV library is at the following URL. However, its library is very, very, smaill
and only a sample of infectors are listed in it --
http://free.grisoft.com/doc/7/lng/us/tpl/v5


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *

 

[S.L.NARASIMHAM]

come to think of it, i did send her a mail with 2 photographs of my grandson
2 days back. may be she was referring to that mail.
but even otherwise, the detected threat was there, wasn't it?
S.L.Narasimham
ps: i got 2 more messages from the same source
first letter
sub: re happy sankranthi and pongal
( this is the same sub line in the mail i opened.)
next letter
sub: re

 

[S.L.NARASIMHAM]

david! that was superfast. i'll do all those things and get back tomorrow.
( it is 11.50 pm in India now.)
thanks a lot.
S.L.Narasimham

From: "S.L.NARASIMHAM" <[email protected]>

| my AVG free edition with realtime protection turned on warned me that i have
| worm/VB.6.AN.
| i had a mail form a friend.
| opened the mail. it had an attachment--attachments.bhx. i saved it to the
| disk and ran an antivirus scan on it. that was when i was warned.
| i didnot open the attachment.
| i deleted the attachment and the mail.
| 30 mts later my daughter while on a chat mentioned that she received a mail
| from me with some photos attached. i said no i didnot send them and please
| delete them. she did.
| when i see the grisoft site ( www.grisoft.com) i donot get any mention of
| this worm.how do i get any info on this? am i infected ( guess i am) what is
| the remedy?
| my AVG free is uptodate.
| TIA.
| S.L.Narasimham
|

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

The Grisoft AV library is at the following URL. However, its library is very, very, smaill
and only a sample of infectors are listed in it --
http://free.grisoft.com/doc/7/lng/us/tpl/v5


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *

 

[S.L.NARASIMHAM]

hi david! did that. scanned in normal and safe modes but downloaded only
sophos and trend. i had already done an online virus scan from mcafee.
result : zero viruses. probably because i didnot open the attachment? thank
god and thank you for setting my mind at rest.
now i know about a good resource.
S.L.Narasimham.

david! that was superfast. i'll do all those things and get back tomorrow.
( it is 11.50 pm in India now.)
thanks a lot.
S.L.Narasimham

From: "S.L.NARASIMHAM" <[email protected]>

| my AVG free edition with realtime protection turned on warned me that

i

have
| worm/VB.6.AN.
| i had a mail form a friend.
| opened the mail. it had an attachment--attachments.bhx. i saved it to the
| disk and ran an antivirus scan on it. that was when i was warned.
| i didnot open the attachment.
| i deleted the attachment and the mail.
| 30 mts later my daughter while on a chat mentioned that she received a mail
| from me with some photos attached. i said no i didnot send them and please
| delete them. she did.
| when i see the grisoft site ( www.grisoft.com) i donot get any mention of
| this worm.how do i get any info on this? am i infected ( guess i am) what is
| the remedy?
| my AVG free is uptodate.
| TIA.
| S.L.Narasimham
|

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

The Grisoft AV library is at the following URL. However, its library is very, very, smaill
and only a sample of infectors are listed in it --
http://free.grisoft.com/doc/7/lng/us/tpl/v5


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE

to
go through your

FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed

files
or you can

download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *

 

[David H. Lipman]

From: "S.L.NARASIMHAM" <[email protected]>

| hi david! did that. scanned in normal and safe modes but downloaded only
| sophos and trend. i had already done an online virus scan from mcafee.
| result : zero viruses. probably because i didnot open the attachment? thank
| god and thank you for setting my mind at rest.
| now i know about a good resource.
| S.L.Narasimham.

Nemaste !