Just got my first virus...help!

[Force Flow]

I've used my home computer for 5 years without ever getting a virus, even though I download like mad.

Well, today, NAV caught a virus on my comp and quarantined it. What do I do with it now? Should I select the "delete permanately" option?

[glc]

Might as well. It's not hurting you sitting in quarantine, but its not doing anything for you either unless you want to play with it or send it to Symantec for analysis.

[Force Flow]

Thanks glc. I don't know anything about programming, so I wouldn't be able to fool around with it anyway. So, deleted it is.

[Statica]

Will also help you immensely to do some reading about the virus itself, and go back and doublecheck whether the virus was stopped in its tracks. Virii create registry keys, files etc. wont hurt you to check if none of those things were done. Also, when faced with a virus caught, I sometimes find it beneficial to check with another antivirus as well (housecall.antivirus.com).

[Force Flow]

Well, here's what it was called: W32.HLLP.Handy

[GUNIT]

you must have d/led a file from kazaa that was infected with the virus...

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllp.handy.html


a lot of viruses and worms are spread throughout kazaa..so beware dude..

just a few weeks ago..my bro's comp was infected with a worm that was spread throught kazaa..the one with the hello kitty file icon..it doesn't really hurt the computer but it runs in the background and sometimes it doesn't make ur computer shut down

:p
but the comp is fixed now

[Force Flow]

I checked symantec just before you posted, GUNIT. What does it do to EXE files? I don't quite understand.

[glc]

Prepend - opposite of append - it attaches itself to the beginning of the file.

[Tuf]

Thats' funny it state's it a Zoo Virus but then say's it spreads through the Kazaa network. I thought Zoo meant it wasn't in the wild.

It doesn't say what the code does or attempts to do.

[Force Flow]

That's what I found surprising. Almost no info on it. :confused:

[Fastfly]

I think its basically like a chainletter......someone created it just to watch it spread code.

But it could do damage and corrupt information when it is replicating and attaching its code.

[Force Flow]

Don't worry. I got rid of it so I can't spread it to you. :p