OT virus???

This is off topic but if anyone out there can help sure would appreciate it. It seem to be getting a continues data from the net. It doesn't appear to be any type of virus but keeps loading in the Windows "Temp". It's titled "update1.exe" and is 152K. Each time it loads it sequences the number i.e. update2, etc. Looking at properties it says "file version 9.31.2541 and claims to be a Microsoft Security Patch for Windows. Does anyone know what this is as I can seems to stop it? It does not appear to be doing any damage but it just won't stop accessing the net and running.

Reply to
Jon Miller
Loading thread data ...

"JCunington"

I run Ad-aware automatically on start up.

You have no idea the number of web sites the secretly load spyware and tracking cookies into your computer whenever you visit their sites.

You should also be wary of "Freeware", even those of reputable software companies, that also download spyware into your computer whenever you download their software. Software like DivX, QuickTime, Gozilla (especially), and other similar programs that we all need, if not all then most of them contain unwanted spyware.

-- Cheers Roger T.

formatting link
of the Great Eastern Railway

Reply to
Roger T.

Go to

formatting link
and get a spyware killer called "Spybot.com". Download it and use it.

Then go buy and install Zone Alarm Pro, version 3.0 or 4.0 which you then configure to keep your machine from "dialing home" and keep the bad guys from accessing your machine through an unguarded "port" in your OS if you are using an "always on" type of connectoon such as a DSL or cable link.

-- Jim McLaughlin

**************************************************************************** **************************************************************************** I am getting really tired of spam, so the reply address is munged. Please don't just hit the reply key. Remove the obvious from the address to reply. **************************************************************************** **************************************************************************** Special treat for spambots: snipped-for-privacy@ftc.gov, snipped-for-privacy@ftc.gov, snipped-for-privacy@ftc.gov

Reply to
Jim McLaughlin

Suddenly this morning it seems to have stopped. Not sure what happen as I really didn't do anything.

Reply to
Jon Miller

It is a virus and arrived by email. Check this link:

formatting link

Governor of Waldovia

formatting link

Reply to
Governor of Waldovia

Reply to
Jon Miller

I had similar problems with auto-start programs that ran without my permission! I found that most could be stopped (eventually) by the following method...

  1. In the IE6 Menu select [TOOLS]-[INTERNET OPTIONS]-[ADVANCED].

  1. Go to "Browsing" and find "Enable third party browser extensions".

  2. Make sure it is NOT selected, then restart the computer.

  1. Delete or rename the suspect .EXE and/or .COM files that appear to be causing the problems.

After this I have no more uninvited applications starting up, and the ones that were already there soon stopped working as "updates" can not load!

It also stops those nasty little pop-up Search-Boxes that install themselves in Explorer from time-to-time (SearchBus etc.)!

Regards,

David.

Reply to
David F.

is

Notice this information from:

formatting link
ProductName MSUpdate FileVersion 9.31.2541 ProductVersion 9.31.2541 InternalName p214537 OriginalFilename p214537.exe

Which relates to the W32.gibe virus

Full description and removal details on the W32.gibe can be found here:

formatting link
Reading the above page will confirm if you have it or not.

Governor of Waldovia

formatting link

Reply to
Governor of Waldovia

With a file name update.exe and a size of 152K (156,648 bytes), it sure sounds like the W32/Gibe.b virus, doesn't it?

formatting link
You didn't happen to get one of those "Microsoft Customer, this is the latest version of security update..." messages which tells you to run the attached file, did you?

I think it was propagating the virus to others.

Reply to
Mark Mathu

latest version of security update..." messages which tells you to run the attached file, did you?< No, actually my old IE 4.x seems to be stopping it from displaying at all. The only way I noticed it was it just is continuously downloading (my modem lights are flashing as I watch. It loads new files into "temp" and they just stay there with each attempt sequencing a number.

Reply to
Jon Miller

Reply to
Jon Miller

I now notice that ebay seems to be off the net. I wonder if there is any connection. I tried to access their information site and even that is down. They usually keep it up when everything else is down.

Reply to
Jon Miller

Try looking on

formatting link

If they don't have it, nobody does!

David.

Reply to
David F.

Sorry I was a bit late with my postings - I see you have already tracked it down!

My Software posts messages before reading.

David.

Reply to
David F.

Microsoft warning:

formatting link
Government warning:
formatting link

Reply to
Mark Mathu

=>Go to

formatting link
and get a spyware killer called "Spybot.com". =>Download it and use it. =>

=> Then go buy and install Zone Alarm Pro, version 3.0 or 4.0 which you =>then configure to keep your machine from "dialing home" and keep the bad =>guys from accessing your machine through an unguarded "port" in your OS if =>you are using an "always on" type of connectoon such as a DSL or cable =>link.

ZA Pro is important protection even if you use dial-up as I do. It shows attempts to access my computer on an average of about once every 5 minutes.

And never, ever, allow "automatic updates" from Microsoft (or from any source except the virus program websites.) Find out first what they are supposed to do, and d/l one only if you really need it.

Micrososft has a history of providing patches and updates that break your system. If it ain't broke, don't fix it!.

"Security patches" may be necessary from time to time, so get those - but get advice first.

Get an anti-virus program, run it, and get the updates (new virus lists) for it at least once a week.

Also, get one of those For Dummies books about your version of Windows - it's not safe to operate a computer if you don't have some understanding of it. Viruses spread because people trust the machine to be safe. The For Dummies books are so good that even computer gurus read them - just to refresh their knowledge.

HTH&GL

Reply to
Wolf Kirchmeir

Dogs everywhere are quivering in fear.

Reply to
E Litella

Reply to
Jon Miller

OK folk help. Nothing would work with my beloved IE 4.x anymore not even the test anti-virus program I downloaded. So I chomped the bit and downloaded IE6. And what happened is what I feared. All messages and folders from the previous program are gone. Is there anyway to get all this data back. I do have it saved on a CD (backup). Is it possible to reload it into IE6?

Reply to
Jon Miller

"Jim McLaughlin" ...

So? The man asked a simple question about OE, and I gave him a simple answer in reply.

and Parts of this are getting too far afield? If you look at the header of this thread it say OT which means that it is OFF TOPIC and has been since the thread started.

Yes there are OFF TOPIC discussions here on a newsgroup that the primary topic is Model Railroading. Maybe I should start a subject "How HAGGIS is good for model railroading":-)

But since we are in an OFF TOPIC thread, looking back at your postings, most which deal with OT (including earlier this thread), so maybe OT postings are okay for some people and not others:-)

I guess the next message although you do have a lot of OT postings you will be posting is telling everyone that I am Plonk:-)

Donald BTW: If you had not sent me a email complaining about this same subject, I probably would not have replied to this message on the newsgroup.

Reply to
Donald Kinney

PolyTech Forum website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.