I'm trying to do a long-distance diagnosis and fix of a supposed virus problem for a friend. The symptoms are, quote:
"My pics and songs are disappearing at an alarming rate, and Norton's is throwing pieces of itself in the trash can."
Has anyone ever heard of a virus that behaves this way? She has done an online virus scan (don't know whose) which pronounced her system clean; yet the symptoms continue.
She has reformatted her hard drive twice, no help. She wants to reformat her other hard drive, but says she doesn't have a disk to do that.
If I had a name for it, I might be able to find a fix.
I know this is feeble info, but right now it's all I've got. I've asked her what OS she's running, but no answer yet.
Thanks for any direction you can offer.
Lou
<FONT SIZE=1 COLOR="#8e236b"><p align=CENTER>[This message was edited by Lou[NE] on 24 October 2002 at 06:43 PM.]</p></FONT>
Virus symptoms?
Moderator: Wiz Feinberg
-
Mark Ardito
- Posts: 899
- Joined: 9 Aug 1999 12:01 am
- Location: Chicago, IL, USA
Lou,
Well, a very typical virus activity is to rename the extensions of .mp3, .jpg, .gif, .bmp or insert the most common file extension here. So that aspect is very curious. When this person says missing, what does that mean...gone...can't find anymore? A virus won't delete them, it will rename the extension so when they are accessed again via double clicking them it will trigger the virus again. For example, rename the .mp3 files to trigger the virus it embedded on your HD so everytime you go to listen to your favorite mp3 it triggers the virus to email your entire address book with klez or whatever.
Have this person go to McAfee's website and use their free online virus scan. After they finish the online scan, recommend to them to get on the web and order a virus scan application. They will thank you later.
Mark
------------------
Sho~Bud Pro I, Fender D-8 (C6&E13) http://www.darkmagneto.com
Well, a very typical virus activity is to rename the extensions of .mp3, .jpg, .gif, .bmp or insert the most common file extension here. So that aspect is very curious. When this person says missing, what does that mean...gone...can't find anymore? A virus won't delete them, it will rename the extension so when they are accessed again via double clicking them it will trigger the virus again. For example, rename the .mp3 files to trigger the virus it embedded on your HD so everytime you go to listen to your favorite mp3 it triggers the virus to email your entire address book with klez or whatever.
Have this person go to McAfee's website and use their free online virus scan. After they finish the online scan, recommend to them to get on the web and order a virus scan application. They will thank you later.
Mark
------------------
Sho~Bud Pro I, Fender D-8 (C6&E13) http://www.darkmagneto.com
-
Dave Boothroyd
- Posts: 902
- Joined: 30 Oct 1999 12:01 am
- Location: Staffordshire Moorlands
One of the most recent virus packages which includes the Bugbear virus does just that- deletes virus protection and goes through firewalls.
It arrives as an extension in an email from someone who knows you, with a heading from an email that they really sent.
Have a look in your start menu.
If there is a program called KAK or IKK, you have the virus.
Our IT people say it is the worst for a long time, but the AV sites should have advice on getting rid of it by now.
Cheers
Dave
It arrives as an extension in an email from someone who knows you, with a heading from an email that they really sent.
Have a look in your start menu.
If there is a program called KAK or IKK, you have the virus.
Our IT people say it is the worst for a long time, but the AV sites should have advice on getting rid of it by now.
Cheers
Dave