A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Internet Explorer OR Outlook Express Virus? or What?



 
 
Thread Tools Display Modes
  #1  
Old July 23rd 04, 05:07 PM
Don Wash
external usenet poster
 
Posts: n/a
Default Internet Explorer OR Outlook Express Virus? or What?

Hi All!

A program automatically launches a site ("w.xx.gigan.to" where 'xx' is the
letters that I can't recall) and start to download a CAB file using Internet
Explorer. I tried to close it and a message box appear "You must choose yes
to install". So I didn't click anything and I shut down the Internet
Explorer using Task Manager.

And it didn't go away because I can see the movement in network activity. So
I disable the LAN. That's when I got a dialog box asking which connection I
want to use to connect to the Internet because 'you' or a program requested
information from site. Sorry guys I was really panicked and didn't
recorded the site address. But as far as I recall it is: "w.xx.gigan.to"
where 'xx' is the letters that I can't recall. That site also as one line of
text saying "If you are happy....you are a prick" or something like that. By
looking at this, we can concluded that this is a Trojan right? Showing
something interesting (or something that you need time to figure out) in
front of you and start messing up with your computer at the back.

So I start System Restore and I restore it to a previous point and when it
start to shut Windows down, Outlook Express ask a message box "Are you sure
you want to terminate this download?". That's when I concluded that the
virus might have entered (or still entering) to my computer through Outlook
Express. But it could also be thought Internet Explorer or any thing else
for that matter. I can't say for sure. After System Restore , my computer is
ok now.

Another strange thing to note is that this incident happened after I
rebooted my computer after running a security update from Microsoft for
Download.Ject virus detection and removal, which can be accessed via:
http://www.microsoft.com/security/in...load_Ject.mspx

Anybody happen to experience similar incident like mine? Or am I the only
one?

My computer has...
- Internet Explorer 6
- Outlook Express 6
- Windows XP SP1

Please, could anyone suggest what on earth is happening to my computer?

Thanks in advance!

Don


Ads
  #2  
Old July 23rd 04, 05:12 PM
Chek
external usenet poster
 
Posts: n/a
Default Internet Explorer OR Outlook Express Virus? or What?

Activate the built in firewall if you're using XP (go to help type in
'firewall' for step by step instructions).
Then download a 2-way firewall such as that available free from:
www.zonelabs.com
This will allow you to monitor/enable/disable two-way traffic in and out of
your PC.

Then get an online virus scan from any or all of these:
Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Symantec Security Check
http://security.symantec.com/ssc/home.asp

Panda ActiveScan - Free online scanner
http://www.pandasoftware.com/actives..._principal.htm

Download and install a permanent anti-virus such as AVG Free Edition from
www.grisoft.com

See how things are after that.
Hope this helps.
Chek

--
Change' boos' to 'bos' in address to email directly
"Don Wash" wrote in message
...
Hi All!

A program automatically launches a site ("w.xx.gigan.to" where 'xx' is the
letters that I can't recall) and start to download a CAB file using

Internet
Explorer. I tried to close it and a message box appear "You must choose

yes
to install". So I didn't click anything and I shut down the Internet
Explorer using Task Manager.

And it didn't go away because I can see the movement in network activity.

So
I disable the LAN. That's when I got a dialog box asking which connection

I
want to use to connect to the Internet because 'you' or a program

requested
information from site. Sorry guys I was really panicked and didn't
recorded the site address. But as far as I recall it is: "w.xx.gigan.to"
where 'xx' is the letters that I can't recall. That site also as one line

of
text saying "If you are happy....you are a prick" or something like that.

By
looking at this, we can concluded that this is a Trojan right? Showing
something interesting (or something that you need time to figure out) in
front of you and start messing up with your computer at the back.

So I start System Restore and I restore it to a previous point and when it
start to shut Windows down, Outlook Express ask a message box "Are you

sure
you want to terminate this download?". That's when I concluded that the
virus might have entered (or still entering) to my computer through

Outlook
Express. But it could also be thought Internet Explorer or any thing else
for that matter. I can't say for sure. After System Restore , my computer

is
ok now.

Another strange thing to note is that this incident happened after I
rebooted my computer after running a security update from Microsoft for
Download.Ject virus detection and removal, which can be accessed via:
http://www.microsoft.com/security/in...load_Ject.mspx

Anybody happen to experience similar incident like mine? Or am I the only
one?

My computer has...
- Internet Explorer 6
- Outlook Express 6
- Windows XP SP1

Please, could anyone suggest what on earth is happening to my computer?

Thanks in advance!

Don




 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 08:04 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.