I have a virus I cant get rid of!!

[Sekgsksue]

Hello all!

I have a virus. I keep getting MAILER-DAEMON telling me my mail couldnt be sent. The problem, I havent sent any mail. I was told it was the Klez virus but house call dosnt pick it up. As a matter of fact, every virus scan I run does not pick it up. I have ran every free virus program I can find and nothing. I really dont want to wipe my drive, but I cant think of anything else to do. Any ideas?

[Statica]

In such situations, providing us as many details as possible will help us understand the issue a lot faster.
(a) What antivirus program first detected the virus
(b) When did you first get the virus alert
(c) What was the action it took when the virus was detected (Quarantine, Clean or Deleted?)
(d) Do you remember the exact name of the virus? (there are too many variations of klez now - while cleaning procedures might be generic, it helps if you know the exact type)

Have you tried out the Symantec Klez removal tool? http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html
Also check your start-up entries from your registry? HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete or move any suspicious entries you may find.

[Statica]

Also check out: http://www.trendmicro.com/download/tsc.asp

[eldon]

Run different virus checks,want hurt,but I dont think thats a virus,if you havent sent out an email,thats usually an email error where an email is returned because of an incorrect address.May want to try adaware or spybot search and destroy,they are both free to download,and run them also theres a site that can run a trojan scan over the net somewhat like trendmicro does,here the address http://www.trojanscan.com/trojanscan/trojanscan.htm hope this helps.

[Sekgsksue]

Thanks for all the response!!
First nothing detected it, I just started getting the MAILER-DAEMON's and then one of them said it was undelerable because it contained the klez virus. I have ran about 10 different virus scans they all say no virus detected, but the next day more MAILER-DAEMON'S. I have adware, trend mircro detects nothing neither does trojanscan, or panda or bullguard......... I have cable dsl and like an idiot I did not have any antivirus running for about 2 months.(I know stupid) I never needed it before. I have removed all cookies and deleted temp internet files, removed all programs I dont recognize, and a day later 10 MAILER-DAEMONS are on my email.

I dont know what else to do but wipe the drive.

Thanks for all the help!

[Statica]

Does your ISP's mail servers have antivirus checks? Are they rejecting mails that were meant for your mailbox and leaving you notifications? If you have them, please post the contents of the error mail here.

[Sekgsksue]

----- The following addresses had permanent fatal errors -----
<grazylegs@aol.com>

Thanks statica, this is the message on one of them, and I dont think there is any antivirus check for my mail. I get alot of spam so I have spam inspector running, but it wont load my mail if I have pc cillian runing to. I think there is a fix for it, just havent had time to do it.


----- Transcript of session follows -----
... while talking to air-xm04.mail.aol.com.:
>>> DATA
<<< 554 TRANSACTION FAILED - Unrepairable Virus Detected. Your mail has not been sent.
554 <grazylegs@aol.com>... Service unavailable

[glc]

Is AOL *your* ISP?

[Sekgsksue]

Nope. I have dsl cable internet. That was just one of the messages. I get returned mail from yahoo and others to. This one just happened to mention I have a virus.

[glc]

Someone else, who has you in their address book, may have one of those mass mailing viruses that spoofs headers, making it appear that it's come from you instead of them - and you are getting the bounce. Is all your legitimate mail getting through that you know of?

[Sekgsksue]

To the best of my knowledge. I mostly use my email from work not much from home, which is why I was confused when 100 emails a day all of a sudden started coming on my home email and then a virus. I had the account for a month and would recieve 1 or 2 emails, and all of a sudden 100 a day! no kidding 100 a day. If I was gone for the weekend, I would have 600 messages. Think that was the start of this?

[Sekgsksue]

Hi!

Just to touch base, I have rid myself of the nasty virus!! At least I think. It has been a while since I have recieved a mailer-daemon.
Thanks for the help!

[ChromWolf]

I may have this exact same thing! Perhaps, as glc suggested, neither one of us ever had a virus in the first place.... I had a friend who had this virus, and it could just be that the e-mails that another friend told me *I* sent were just listed as being my name.... I've run the Trend Micro free search, and it turned up nothing... So perhaps I'm good...?

My thread can be seen here:
http://forum.pcmech.com/showthread.php?threadid=72409