Go Back   PCMech Forums > Windows Support > Windows Legacy Support (XP and earlier)

Need Some Help? Type Your Keywords Here:

Reply
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
Old 08-23-2003, 12:56 PM   #1
Member (8 bit)
 
Join Date: Nov 2001
Posts: 164
Virus

Hey guys first I want to say that I am pretty knowledgeable or at least not lame minded when it comes to virus's and I have been surfin with my DSL for a few years without ever getting one so far. But now I know I have something because whether im checkin my AOL mail or my hotmail there is always returned mail for certain reasons but its mail i never sent out. So im thinkin it must be one of those outlook express deals that just keeps passin on and sends mail without you even knowing about it.

My MSN messenger is always starting and runnin in the background as well (but not signed in) and wont let me close it manually because it says it cant be closed when outlook express or some similiar program is running. I live update my norton every couple days and have scanned the whole comp and its found nothing.

Thanx, Sean
Badboysean is offline   Reply With Quote
Old 08-23-2003, 01:51 PM   #2
HOCKEY FREAK
 
ZANEY123's Avatar
 
Join Date: Jul 2002
Location: philadelphia pa
Posts: 1,078
have you disable messenger through CONTROL PANEL>ADMIN TOOLS>SERVICES ?
ZANEY123 is offline   Reply With Quote
Old 08-23-2003, 02:15 PM   #3
Member (8 bit)
 
Join Date: Nov 2001
Posts: 164
yes, the pop up messenger ads I have disabled if thats what ya mean.
Badboysean is offline   Reply With Quote
Old 08-23-2003, 02:26 PM   #4
HOCKEY FREAK
 
ZANEY123's Avatar
 
Join Date: Jul 2002
Location: philadelphia pa
Posts: 1,078
http://forum.pcmech.com/showthread.p...+MSN+messenger

read through this and see if it helps.
ZANEY123 is offline   Reply With Quote
Old 08-26-2003, 07:54 PM   #5
Member (8 bit)
 
Join Date: Nov 2001
Posts: 164
I keep getting messages that I am sending out a .pif virus. Norton isnt pickin anything up though, how do I get rid of it?
Badboysean is offline   Reply With Quote
Old 08-26-2003, 07:56 PM   #6
Member (8 bit)
 
Join Date: Nov 2001
Posts: 164
American Express replied saying that they wouldnt allow this email through because of a virus, this is what they found:

W32/Sobig.f@MM virus in the attached file: document_all.pif
Badboysean is offline   Reply With Quote
Old 08-26-2003, 08:10 PM   #7
Shiro Usagi
Premium Member
 
Cricket's Avatar
 
Join Date: Sep 1999
Location: Kaneohe, Hawaii
Posts: 34,002
Go here and see if the downloadable tool and information helps you remove the virus.

Cricket
Cricket is offline   Reply With Quote
Old 08-26-2003, 08:30 PM   #8
Member (8 bit)
 
Join Date: Nov 2001
Posts: 164
Thanx Cricket, I was actually doing that as you posted =) I just went through all that and it says that my computer isnt infected with it. Somethin weird is goin.
Badboysean is offline   Reply With Quote
Old 08-27-2003, 12:22 PM   #9
Member (8 bit)
 
Join Date: Nov 2001
Posts: 164
no virus scanners are pickin anything up but aparently my computer is still sendin out these .pif viruses daily.
Badboysean is offline   Reply With Quote
Old 08-27-2003, 01:16 PM   #10
Member (12 bit)
 
andyms18a's Avatar
 
Join Date: Dec 2002
Location: essex
Posts: 2,252
are you useing a firewall try a free one like sygate or zone alarm as the built in xp one wont stop out going conections
all so to test if it is your computer disconect from the net for a day and see if any emails show as returnd for that day
__________________
Join the PcMech.com Folding@Home Team and Help Save Lives! Click Here!
Life only looks greener on the other side of the fence
andyms18a is offline   Reply With Quote
Old 08-27-2003, 01:47 PM   #11
Member (8 bit)
 
Cheryl's Avatar
 
Join Date: Aug 2000
Location: Albany, NY
Posts: 252
W32/Sobig.f@MM spoofs email addys...so even tho you're probly not infected, whoever is has you email addy in their address book.

below copied from Sobig description at symantec:

From: Spoofed address (which means that the sender in the "From" field is most likely not the real sender). The worm may also use the address, admin@internet.com, as the sender.

NOTES:
The spoofed addresses and the Send To addresses are both taken from the files found on the computer. Also, the worm may use the settings of the infected computer's settings to check for an SMTP server to contact.
The choice of the internet.com domain appears to be arbitrary and does not have any connection to the actual domain or its parent company.

Cheryl
Cheryl is offline   Reply With Quote
Reply

Bookmarks

Still Need Help? Type Your Keywords Here:


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 01:50 PM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 PL2