new evil ?

[id325]

something strange happened to me yesterday.. i have worked on the net for 10 years
and i never saw something like this. i am almost protected to most viruses using avg and
windows defender and disabling java ...

but this came creeping on me from behind.. i was chatting normally when something
got in to my email messenger hot mail.. i get a message that say look at my images
at my space and an rar file and i get the massage from any person from my contacts
that i am chatting with.. for my surprise i was chatting with a friend an i thought he sended
the file so i opened it and it was a backdoor virus..!!! i replied to my friend telling him
what the hell did you send me man? he said i didnt send anything and he added
what the hell did u send me? (the file got sended to him also throw my mail address and
to everyone i chat with online lol) i told him very fast oh oh don't open the rar but
it was too late.. he got hit also... after few minuets my os came to a slow death by poison
and i am now back on after a clean format. i didnt even have time to recored the viry name.

i have few question please :

1_ what the hell happened? i got hacked by a contact? or mail spam? or was it an attack
on msn at the holiday times? did anyone got that yesterday?
2_ is my email now infected? am scared to open msn. did i kill the viri by formating?
is it save to even open my mail via web browser?

[Brothersoft]

Hum.. There are some MSN spam senders indeed, maybe they send the backdoor virus? Also I suggest you never open strange files at will, and show the filename extensions in Windows explorer to avoid instant opening the executable programs (for me, I often use Universal Extractor to unpack the installation packs, and see whether there are suspicious files), many virus can pretend to be your familiar files (e.g. appear as WinRAR icon).

[pam123]

If you formatted then the malware got zapped, you're clean.
As you just found out there's a new strain, highly virulent, being sent through Hotmail that uses the contacts list.
You just have to be in the contact list of anyone who gets hit with it to get hit in turn.

Do not open unexpected files, period.

[id325]

so the mail got spamed coz i opened the file? meaning they cant spam it if i didnt open?
am asking in case i opend the mail again and i got that message. sry quite a nob here..
what is this world is coming into?

[pam123]

It's going to happen,the basic rule is that you don't open anything you weren't expecting.
And, please, keep your security software up to date.

[id325]

yes my avg and win diffender is up to date thanks pam . i just dont use fire wall as i have a quite slow
connection 384/128 k ..

[pam123]

You need the firewall, that's how the hacker got you.
There was a time when they only went after fast connections but that time is no more.

[id325]

well i remembered that i scanned the file with avg but it didnt show a virus

[hitchface]

AVG tends to have a fairly low detection rate.

[Cricket]

Since this sounds like a trojan you would have needed to scan the attachment with a anti-spyware/malware scanner to detect it.

:) Cricket

[pam123]

AVG tends to have a fairly low detection rate.


That isn't true but the FUD won't die.
No anti-virus is 100% and AVG does a very good job.

[hitchface]

It does do a good job, but you look at the charts, and AVG ain't near the top.

[Cricket]

It does do a good job, but you look at the charts, and AVG ain't near the top.What charts? Got a link?

:) Cricket

[hitchface]

http://www.av-comparatives.org/

[pam123]

Nice site!
If you meant that while AVG does a good job there are others that do it better then yes.

[hitchface]

That's exactly what I meant. Sorry for the confusion.

[id325]

and were dose norton stand is this list? besides not all those programs are free like
avg .. sorry but this list have more advertising purposes rather than technical.

quoted from the site :

f you plan to buy an Anti-Virus, please visit the vendor's site and evaluate their software by downloading a trial version

[Negeva]

and were dose norton stand is this list? besides not all those programs are free like
avg .. sorry but this list have more advertising purposes rather than technical.

quoted from the site :

f you plan to buy an Anti-Virus, please visit the vendor's site and evaluate their software by downloading a trial version


Forget Norton and McAfee, only good thing about them is that they're relatively easy to setup. Their detection rates are generally below average and don't even get me started on how useless their firewalls are as shown by this wonderful link: http://www.matousec.com/projects/windows-personal-firewall-analysis/leak-tests-results.php#result-table

[pam123]

Forget Norton and McAfee, only good thing about them is that they're relatively easy to setup. Their detection rates are generally below average and don't even get me started on how useless their firewalls are as shown by this wonderful link: http://www.matousec.com/projects/windows-personal-firewall-analysis/leak-tests-results.php#result-table


There is a site for testing firewalls that makes no recommendations.
It just gives you the results, its' reputation is sterling, and it's been around for years now.
If ShieldsUp gives your firewall a passing grade then your firewall is doing its' job.

https://www.grc.com/x/ne.dll?bh0bkyd2

[usnavyretired]

I've seen the results of that site before but "leak test" mean's nothing because if your leaking, you've already been infected and your inbound protection failed you. I don't want a firewall because it keeps malware from phoning home, I want one that keeps it from getting on my machine in the first place.

[usnavyretired]

Just saw pams post and Steve Gibson's site is one of the Best for testing a firewall.

[hitchface]

and were dose norton stand is this list? besides not all those programs are free like
avg .. sorry but this list have more advertising purposes rather than technical.

quoted from the site :

f you plan to buy an Anti-Virus, please visit the vendor's site and evaluate their software by downloading a trial version

That isn't advertising, thats saying to test out their software with a free version before you buy it.