HELP ! My PC has been compromised !!

Last nite my PC behaves normally, but this morning, it took over 1
hour to boot up the XP.

Now, in the tasking tray, I see tons and tons of messages are being
sent out !

I have not configure this PC to send out emails. I use webmails. But
now my PC is sending out tons and tons of emails !!

The symantec norton antivirus is doing the "Symantec Email Scan" on
those emails and the emails are jamming up the system.

What can I do ????

What software should I use to remove this security breach ????

Please help !!!!

Thank you !!

 

From: <penang@freemail.c3.hu>

| Last nite my PC behaves normally, but this morning, it took over 1
| hour to boot up the XP.
|
| Now, in the tasking tray, I see tons and tons of messages are being
| sent out !
|
| I have not configure this PC to send out emails. I use webmails. But
| now my PC is sending out tons and tons of emails !!
|
| The symantec norton antivirus is doing the "Symantec Email Scan" on
| those emails and the emails are jamming up the system.
|
| What can I do ????
|
| What software should I use to remove this security breach ????
|
| Please help !!!!
|
| Thank you !!



Download and execute HiJack This! (HJT)


Create a HJT log file and post it in one of the below locations...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:


Suggested secondary:



Suggested tertiary:
















[url=http://forums.security-central.us/forumdisplay.php?f=13" target="_blank http://forums.security-central.us/forumdisplay.php?f=13[url]


--
Dave
[url=http://www.claymania.com/removal-trojan-adware.html" target="_blank http://www.claymania.com/removal-trojan-adware.html[url]
Multi-AV - [url=http://www.pctipp.ch/downloads/dl/35905.asp" target="_blank http://www.pctipp.ch/downloads/dl/35905.asp[url][/url][/url][/url]

 

Unexplained computer behavior may be caused by deceptive software


Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware











When all else fails, HijackThis v2.0.2
() is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
,
,
,
, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.


penang@freemail.c3.hu wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Last nite my PC behaves normally, but this morning, it took over 1
> hour to boot up the XP.
>
> Now, in the tasking tray, I see tons and tons of messages are being
> sent out !
>
> I have not configure this PC to send out emails. I use webmails. But
> now my PC is sending out tons and tons of emails !!
>
> The symantec norton antivirus is doing the "Symantec Email Scan" on
> those emails and the emails are jamming up the system.
>
> What can I do ????
>
> What software should I use to remove this security breach ????
>
> Please help !!!!
>
> Thank you !! <!--colorc--><!--/colorc-->

 

<penang@freemail.c3.hu> wrote in message
news:284d05e7-7d2a-425d-87fe-4279d9af68c8@e6g2000prf.googlegroups.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Last nite my PC behaves normally, but this morning, it took over 1
> hour to boot up the XP.
>
> Now, in the tasking tray, I see tons and tons of messages are being
> sent out !
>
> I have not configure this PC to send out emails. I use webmails. But
> now my PC is sending out tons and tons of emails !!
>
> The symantec norton antivirus is doing the "Symantec Email Scan" on
> those emails and the emails are jamming up the system.
>
> What can I do ????
>
> What software should I use to remove this security breach ????
>
> Please help !!!!
>
> Thank you !!<!--colorc--><!--/colorc-->

The very first thing you should do is to disconnect the PC from any network
connection or telephone line, so that it cannot send anything. Then, you
can start scanning and manually searching for files that shouldn't be
running or in existence. Process Explorer and Hijack This are good
starting points.

Look for .exe and .dll files that have apparently random names. If you
delete them and new ones come back, there is another file that is creating
them you've missed.

Often these files are hidden away, so doing searches for hidden and system
files can often identify malware. Go to a command prompt, and from the
root directory use the dir command with the /a:h and /a:s switches to show
system and hidden files, and the /S switch to search all subdirectories.
At the end of the command, use the redirect to file to get a file you can
actually read: dir /ah /S >>list.txt

Clear *all* the temp folders and content.ie5 folders. This is a prime
location and entry point for malware. Look in the System32 folder for
files that shouldn't be there.

You can attach that drive to another well-protected system and scan it as a
hosted drive. Trying to gain control of an actively infected drive can be
difficult, but hosting it makes the process a lot easier since the
infections can't launch at boot.

Because you don't boot from it, there is very limited opportunity for
infection to spread to the host system. You might try using the Trend
Micro Housecall online scanner; since its files are online they are much
harder to compromise.

HTH
-pk

 

On Sat, 8 Mar 2008 16:43:53 -0800 (PST), penang@freemail.c3.hu wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>Last nite my PC behaves normally, but this morning, it took over 1
>hour to boot up the XP.
>
>Now, in the tasking tray, I see tons and tons of messages are being
>sent out !
>
>I have not configure this PC to send out emails. I use webmails. But
>now my PC is sending out tons and tons of emails !!
>
>The symantec norton antivirus is doing the "Symantec Email Scan" on
>those emails and the emails are jamming up the system.
>
>What can I do ????
>
>What software should I use to remove this security breach ????
>
>Please help !!!!
>
>Thank you !!<!--colorc--><!--/colorc-->

You should of course revert to the latest known clean state - which
ultimately means flatten and rebuild.

 

Straight Talk <b__nice@hotmail.com> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> On Sat, 8 Mar 2008 16:43:53 -0800 (PST), penang@freemail.c3.hu wrote:
><!--coloro:green--><span style="color:green <!--/coloro-->
>> Last nite my PC behaves normally, but this morning, it took over 1
>> hour to boot up the XP.
>>
>> Now, in the tasking tray, I see tons and tons of messages are being
>> sent out !
>>
>> I have not configure this PC to send out emails. I use webmails. But
>> now my PC is sending out tons and tons of emails !!
>>
>> The symantec norton antivirus is doing the "Symantec Email Scan" on
>> those emails and the emails are jamming up the system.
>>
>> What can I do ????
>>
>> What software should I use to remove this security breach ????
>>
>> Please help !!!!
>>
>> Thank you !!<!--colorc--><!--/colorc-->
>
> You should of course revert to the latest known clean state - which
> ultimately means flatten and rebuild.<!--colorc--><!--/colorc-->

Well, that's a bit dire - it may not be at all necessary. It *might* be, but
it isn't the first thing I'd try.

 

<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
> >Thank you !!<!--colorc--><!--/colorc-->
>
> You should of course revert to the latest known clean state - which
> ultimately means flatten and rebuild.<!--colorc--><!--/colorc-->

1. Get some nice free spyware remover, or at least scanner to get the
names of parasites. SuperAntiSpyware or Malwarebytes anti-malware to
name a few that have free versions, spyware terminator, etc.
2. If you opt for software that offers free scans only (Spyware
Doctor, CounterSpy, SpySpweeper, etc), google for spyware names it
finds, there might be free solutions/information about these
parasites. Especially if you want to get out from this freely. You can
pay for them, if you wish.
3. Post hijackthis logs in forums and wait for help.

For the future, I strongly suggest updating browser if you still use
IE older than 6. IE 7 is much better if your PC can handle it.

 

Lanwench [MVP - Exchange] wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Straight Talk <b__nice@hotmail.com> wrote:
> <!--coloro:green--><span style="color:green <!--/coloro-->
>>On Sat, 8 Mar 2008 16:43:53 -0800 (PST), penang@freemail.c3.hu wrote:
>>
>><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>>Last nite my PC behaves normally, but this morning, it took over 1
>>>hour to boot up the XP.
>>>
>>>Now, in the tasking tray, I see tons and tons of messages are being
>>>sent out !
>>>
>>>I have not configure this PC to send out emails. I use webmails. But
>>>now my PC is sending out tons and tons of emails !!
>>>
>>>The symantec norton antivirus is doing the "Symantec Email Scan" on
>>>those emails and the emails are jamming up the system.
>>>
>>>What can I do ????
>>>
>>>What software should I use to remove this security breach ????
>>>
>>>Please help !!!!
>>>
>>>Thank you !!<!--colorc--><!--/colorc-->
>>
>>You should of course revert to the latest known clean state - which
>>ultimately means flatten and rebuild.<!--colorc--><!--/colorc-->
>
>
> Well, that's a bit dire - it may not be at all necessary. It *might* be, but
> it isn't the first thing I'd try.
>
> <!--colorc--><!--/colorc-->
Well, you've certainly picked up some malware. I wonder how Symantec
missed it.

 

Tom <t.wyckoff@verizon.net> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Lanwench [MVP - Exchange] wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> Straight Talk <b__nice@hotmail.com> wrote:
>><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> On Sat, 8 Mar 2008 16:43:53 -0800 (PST), penang@freemail.c3.hu
>>> wrote:
>>>> Last nite my PC behaves normally, but this morning, it took over 1
>>>> hour to boot up the XP.
>>>>
>>>> Now, in the tasking tray, I see tons and tons of messages are being
>>>> sent out !
>>>>
>>>> I have not configure this PC to send out emails. I use webmails.
>>>> But now my PC is sending out tons and tons of emails !!
>>>>
>>>> The symantec norton antivirus is doing the "Symantec Email Scan" on
>>>> those emails and the emails are jamming up the system.
>>>>
>>>> What can I do ????
>>>>
>>>> What software should I use to remove this security breach ????
>>>>
>>>> Please help !!!!
>>>>
>>>> Thank you !!
>>>
>>> You should of course revert to the latest known clean state - which
>>> ultimately means flatten and rebuild.<!--colorc--><!--/colorc-->
>>
>>
>> Well, that's a bit dire - it may not be at all necessary. It *might*
>> be, but it isn't the first thing I'd try.
>>
>><!--colorc--><!--/colorc-->
> Well, you've certainly picked up some malware. I wonder how Symantec
> missed it.<!--colorc--><!--/colorc-->

<looks around frantically, in sudden terror>

I have? Oh my god! And I don't even *have* Symantec software on here!

Wait. Symantec *is* malware, and you must not have meant to reply to *me* .

 

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:uckc29kgIHA.748@TK2MSFTNGP04.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Tom <t.wyckoff@verizon.net> wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> Lanwench [MVP - Exchange] wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Straight Talk <b__nice@hotmail.com> wrote:
>>>
>>>> On Sat, 8 Mar 2008 16:43:53 -0800 (PST), penang@freemail.c3.hu
>>>> wrote:
>>>>> Last nite my PC behaves normally, but this morning, it took over 1
>>>>> hour to boot up the XP.
>>>>>
>>>>> Now, in the tasking tray, I see tons and tons of messages are being
>>>>> sent out !
>>>>>
>>>>> I have not configure this PC to send out emails. I use webmails.
>>>>> But now my PC is sending out tons and tons of emails !!
>>>>>
>>>>> The symantec norton antivirus is doing the "Symantec Email Scan" on
>>>>> those emails and the emails are jamming up the system.
>>>>>
>>>>> What can I do ????
>>>>>
>>>>> What software should I use to remove this security breach ????
>>>>>
>>>>> Please help !!!!
>>>>>
>>>>> Thank you !!
>>>>
>>>> You should of course revert to the latest known clean state - which
>>>> ultimately means flatten and rebuild.
>>>
>>>
>>> Well, that's a bit dire - it may not be at all necessary. It *might*
>>> be, but it isn't the first thing I'd try.
>>>
>>><!--colorc--><!--/colorc-->
>> Well, you've certainly picked up some malware. I wonder how Symantec
>> missed it.<!--colorc--><!--/colorc-->
>
> <looks around frantically, in sudden terror>
>
> I have? Oh my god! And I don't even *have* Symantec software on here!
>
> Wait. Symantec *is* malware, and you must not have meant to reply to *me*
> .
>
>
><!--colorc--><!--/colorc-->
You must be the only one that doesn't have Symantec. ;-)


--
Computers make very fast, very accurate mistakes.

 

Ricky <rsjoiner@NO_SPAMbellsouth.net> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:uckc29kgIHA.748@TK2MSFTNGP04.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> Tom <t.wyckoff@verizon.net> wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Lanwench [MVP - Exchange] wrote:
>>>> Straight Talk <b__nice@hotmail.com> wrote:
>>>>
>>>>> On Sat, 8 Mar 2008 16:43:53 -0800 (PST), penang@freemail.c3.hu
>>>>> wrote:
>>>>>> Last nite my PC behaves normally, but this morning, it took over
>>>>>> 1 hour to boot up the XP.
>>>>>>
>>>>>> Now, in the tasking tray, I see tons and tons of messages are
>>>>>> being sent out !
>>>>>>
>>>>>> I have not configure this PC to send out emails. I use webmails.
>>>>>> But now my PC is sending out tons and tons of emails !!
>>>>>>
>>>>>> The symantec norton antivirus is doing the "Symantec Email Scan"
>>>>>> on those emails and the emails are jamming up the system.
>>>>>>
>>>>>> What can I do ????
>>>>>>
>>>>>> What software should I use to remove this security breach ????
>>>>>>
>>>>>> Please help !!!!
>>>>>>
>>>>>> Thank you !!
>>>>>
>>>>> You should of course revert to the latest known clean state -
>>>>> which ultimately means flatten and rebuild.
>>>>
>>>>
>>>> Well, that's a bit dire - it may not be at all necessary. It
>>>> *might* be, but it isn't the first thing I'd try.
>>>>
>>>>
>>> Well, you've certainly picked up some malware. I wonder how
>>> Symantec missed it.<!--colorc--><!--/colorc-->
>>
>> <looks around frantically, in sudden terror>
>>
>> I have? Oh my god! And I don't even *have* Symantec software on here!
>>
>> Wait. Symantec *is* malware, and you must not have meant to reply to
>> *me* .
>>
>>
>><!--colorc--><!--/colorc-->
> You must be the only one that doesn't have Symantec. ;-)<!--colorc--><!--/colorc-->

Oh, not by a long shot!

 

From: "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com>

<!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro-->
>> You must be the only one that doesn't have Symantec. ;-)<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
|
| Oh, not by a long shot!
|

I wish people would not confuse Norton AV with Symantec AV.
The difference between the corporate offering (Symantec AV) vs. the retail offering (Norton
AV) is night and day.

It is the retail version that pisses people off.

--
Dave

Multi-AV -

 

David H. Lipman <DLipman~nospam~@Verizon.Net> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> From: "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com>
>
><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> You must be the only one that doesn't have Symantec. ;-)<!--colorc--><!--/colorc-->
>>
>> Oh, not by a long shot!
>><!--colorc--><!--/colorc-->
>
> I wish people would not confuse Norton AV with Symantec AV.
> The difference between the corporate offering (Symantec AV) vs. the
> retail offering (Norton AV) is night and day.
>
> It is the retail version that pisses people off.<!--colorc--><!--/colorc-->

Well, I'm pretty pissed off at Symantec's abyssmal tech support for their
enterprise products, so I don't think I fall into the category of person to
which you refer. The only Symantec stuff I use at any client site is
BackupExec, and that's because I used to adore Veritas and Symantec hasn't
managed to entirely kill off that good product yet.

 

On Sun, 9 Mar 2008 11:09:17 -0400, "Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>Straight Talk <b__nice@hotmail.com> wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> On Sat, 8 Mar 2008 16:43:53 -0800 (PST), penang@freemail.c3.hu wrote:
>><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Last nite my PC behaves normally, but this morning, it took over 1
>>> hour to boot up the XP.
>>>
>>> Now, in the tasking tray, I see tons and tons of messages are being
>>> sent out !
>>>
>>> I have not configure this PC to send out emails. I use webmails. But
>>> now my PC is sending out tons and tons of emails !!
>>>
>>> The symantec norton antivirus is doing the "Symantec Email Scan" on
>>> those emails and the emails are jamming up the system.
>>>
>>> What can I do ????
>>>
>>> What software should I use to remove this security breach ????
>>>
>>> Please help !!!!
>>>
>>> Thank you !!<!--colorc--><!--/colorc-->
>>
>> You should of course revert to the latest known clean state - which
>> ultimately means flatten and rebuild.<!--colorc--><!--/colorc-->
>
>Well, that's a bit dire - it may not be at all necessary. <!--colorc--><!--/colorc-->

Problem is, you wouldn't be able to tell whether it is or not unless
you have a baseline.
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>It *might* be, but it isn't the first thing I'd try. <!--colorc--><!--/colorc-->

Trial and error against malware is a common but very stupid approach.

 

On Sun, 9 Mar 2008 09:01:08 -0700 (PDT), giedrius.majauskas@gmail.com
wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>> >Thank you !!<!--colorc--><!--/colorc-->
>>
>> You should of course revert to the latest known clean state - which
>> ultimately means flatten and rebuild.<!--colorc--><!--/colorc-->
>
>1. Get some nice free spyware remover, or at least scanner to get the
>names of parasites. <!--colorc--><!--/colorc-->

How about getting a clue instead.
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>SuperAntiSpyware or Malwarebytes anti-malware to
>name a few that have free versions, spyware terminator, etc.<!--colorc--><!--/colorc-->

What makes you believe these will work? - Advertising?
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>2. If you opt for software that offers free scans only (Spyware
>Doctor, CounterSpy, SpySpweeper, etc), google for spyware names it
>finds, there might be free solutions/information about these
>parasites. Especially if you want to get out from this freely. You can
>pay for them, if you wish.<!--colorc--><!--/colorc-->

Yeah, fill up your machine with anti-crap.....
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>3. Post hijackthis logs in forums and wait for help.
>
>For the future, I strongly suggest updating browser if you still use
>IE older than 6. IE 7 is much better if your PC can handle it.<!--colorc--><!--/colorc-->

Better stay away from IE completely (with IE7 on Vista in protected
mode as a possible exception).

 

On Sun, 9 Mar 2008 21:39:46 -0500, "Ricky"
<rsjoiner@NO_SPAMbellsouth.net> wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
>"Lanwench [MVP - Exchange]"
><lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
>news:uckc29kgIHA.748@TK2MSFTNGP04.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> Tom <t.wyckoff@verizon.net> wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Lanwench [MVP - Exchange] wrote:
>>>> Straight Talk <b__nice@hotmail.com> wrote:
>>>>
>>>>> On Sat, 8 Mar 2008 16:43:53 -0800 (PST), penang@freemail.c3.hu
>>>>> wrote:
>>>>>> Last nite my PC behaves normally, but this morning, it took over 1
>>>>>> hour to boot up the XP.
>>>>>>
>>>>>> Now, in the tasking tray, I see tons and tons of messages are being
>>>>>> sent out !
>>>>>>
>>>>>> I have not configure this PC to send out emails. I use webmails.
>>>>>> But now my PC is sending out tons and tons of emails !!
>>>>>>
>>>>>> The symantec norton antivirus is doing the "Symantec Email Scan" on
>>>>>> those emails and the emails are jamming up the system.
>>>>>>
>>>>>> What can I do ????
>>>>>>
>>>>>> What software should I use to remove this security breach ????
>>>>>>
>>>>>> Please help !!!!
>>>>>>
>>>>>> Thank you !!
>>>>>
>>>>> You should of course revert to the latest known clean state - which
>>>>> ultimately means flatten and rebuild.
>>>>
>>>>
>>>> Well, that's a bit dire - it may not be at all necessary. It *might*
>>>> be, but it isn't the first thing I'd try.
>>>>
>>>>
>>> Well, you've certainly picked up some malware. I wonder how Symantec
>>> missed it.<!--colorc--><!--/colorc-->
>>
>> <looks around frantically, in sudden terror>
>>
>> I have? Oh my god! And I don't even *have* Symantec software on here!
>>
>> Wait. Symantec *is* malware, and you must not have meant to reply to *me*
>> .
>>
>>
>><!--colorc--><!--/colorc-->
>You must be the only one that doesn't have Symantec. ;-)<!--colorc--><!--/colorc-->

Had it on my first comp back in `99 for a month .

 

From: "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com>


|
| Well, I'm pretty pissed off at Symantec's abyssmal tech support for their
| enterprise products, so I don't think I fall into the category of person to
| which you refer. The only Symantec stuff I use at any client site is
| BackupExec, and that's because I used to adore Veritas and Symantec hasn't
| managed to entirely kill off that good product yet.
|

That, I agree with you.

--
Dave

Multi-AV -

 

"Ricky" <rsjoiner@NO_SPAMbellsouth.net> wrote in message
news:Wb1Bj.5481$r76.533@bignews8.bellsouth.net...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:uckc29kgIHA.748@TK2MSFTNGP04.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>>
>> Wait. Symantec *is* malware, and you must not have meant to reply to *me*
>> .
>>
>>
>><!--colorc--><!--/colorc-->
> You must be the only one that doesn't have Symantec. ;-)<!--colorc--><!--/colorc-->


Wouldn't have it anywhere near one of my machines or a customer's.

--
Frank Saunders MS-MVP IE,OE/WM

Do not reply with email

 

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:WK1Bj.2731$HA3.948@trnddc02...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> From: "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com>
>
><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> You must be the only one that doesn't have Symantec. ;-)<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
> |
> | Oh, not by a long shot!
> |
>
> I wish people would not confuse Norton AV with Symantec AV.
> The difference between the corporate offering (Symantec AV) vs. the retail
> offering (Norton
> AV) is night and day.
>
> It is the retail version that pisses people off.<!--colorc--><!--/colorc-->


If they foist that crap on the poor, ignorant public they don't deserve
respect for anything.

--
Frank Saunders MS-MVP IE,OE/WM

Do not reply with email

 

Straight Talk <b__nice@hotmail.com> wrote:

<snipped for length><!--coloro:blue--><span style="color:blue <!--/coloro--><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>>
>>> You should of course revert to the latest known clean state - which
>>> ultimately means flatten and rebuild.<!--colorc--><!--/colorc-->
>>
>> Well, that's a bit dire - it may not be at all necessary.<!--colorc--><!--/colorc-->
>
> Problem is, you wouldn't be able to tell whether it is or not unless
> you have a baseline.
><!--coloro:green--><span style="color:green <!--/coloro-->
>> It *might* be, but it isn't the first thing I'd try.<!--colorc--><!--/colorc-->
>
> Trial and error against malware is a common but very stupid approach.<!--colorc--><!--/colorc-->

Nonsense. It depends entirely on the severity of the infestation. I won't
spend hours and hours on a troubled workstation, but if I can pretty easily
remove a not-very-invasive piece of malware or two, I simply do so. I don't
tell a client, "Sorry; I saw a popup - it's format time!" What is a "stupid
approach" (I merely quote you; I tend not to use such derogatory language)
is any hard and fast rule applied blindly regardless of situation.