virus infostealer and I-Worm/Stration

originale · 11-07-2006, 09:14 AM

I received 2 emails from my ISP from the same person which the ISP says contained the virus Infostealer. Sometimes this happens but the file is ok. I saved it to desktop and ran AVG on it that said no virus but then inadvertently clicked on the file and the word doc was blank- which suggests it really was bogus. Now I'm afraid I've imported the virus. I'm running AVG as we speak and it's not finding anything. Did I import the virus?

AVG has also just created a folder I never saw before in Outlook called AVG Virus Vault and there are two msg in there saying the worm I-Worm/Stration is in the attachment and it was moved to the vault. I never opened this bulk mail so not sure how AVG moved it. But what should I do with this? Delete the msg?

Am I infected? Shall I run an HJT?

thanks

originale · 11-07-2006, 09:27 AM

BTW-seems to be coming from bestbuy.com Makes me worry about buying stuff online or registering with many of these companies online? Shd i be worried that their databases get hacked into?

originale · 11-08-2006, 12:59 PM

virus infostealer and I-Worm/Stration
I received 2 emails from my ISP from the same person which the ISP says contained the virus Infostealer. Sometimes this happens but the file is ok. I saved it to desktop and ran AVG on it that said no virus but then inadvertently clicked on the file and the word doc was blank- which suggests it really was bogus. Now I'm afraid I've imported the virus. I'm running AVG as we speak and it's not finding anything. Did I import the virus?

AVG has also just created a folder I never saw before in Outlook called AVG Virus Vault and there are two msg in there saying the worm I-Worm/Stration is in the attachment and it was moved to the vault. I never opened this bulk mail so not sure how AVG moved it. But what should I do with this? Delete the msg?

Am I infected? Shall I run an HJT?

thanks
originale is online now Report Post Reply With Quote Multi-Quote This Message Quick reply to this message
originale
View Public Profile
Send a private message to originale
Find More Posts by originale
Add originale to Your Buddy List
My System Information
Old Yesterday, 11:27 AM #2 (permalink)
originale
I helped the forums.

originale's Avatar

Join Date: Sep 2004
Posts: 359
OS: winXP

Follow upbestbuy.com originator?
BTW-seems to be coming from bestbuy.com Makes me worry about buying stuff online or registering with many of these companies online? Shd i be worried that their databases get hacked into?

dorts · 11-08-2006, 07:23 PM

Yes, I would recommend you to run HJT. You shouldn't open things you are unsure of.

Please follow MicroBell's 5 Step process outlined here

After running through all the steps, best thing to do is have one of the HijackThis helpers take a look at a log.

Please download HijackThis - this program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\

Double click on HijackThis.exe to run the program.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file in the HijackThis Log Help forum. Do not fix anything in HijackThis since they may be harmless.

originale · 11-10-2006, 02:11 PM

Had already run Ad Aware, CW Shredder and Spy bot. Don't know why= but couldn't get far with other virus scanners. Tried them all. Panda wouldn't fix because kept on saying pop up blocker was on when it wasn't. Mc Afee ID'd a virus but there was no option to fix it. Symantec wouldn't go. E-Scan couldn't enable. On and on. So not sure what is happening.

Also, not sure whyAVG didn't pick this virus up that is in my computer. What do you suggest if I can't run any of the virus checkers? Shall I just run an HJT anyway?

**Glaswegian** · 11-10-2006, 03:03 PM

Hi originale

Please follow dorts' suggestion and post a log. Remember that no one scanner will pick up everything. It's best to get poperly checked out now, as one infection could also let others in to your system.

11-07-2006, 09:14 AM	#1 (permalink)
originale Registered User Join Date: Sep 2004 Posts: 441 OS: winXP	virus infostealer and I-Worm/Stration I received 2 emails from my ISP from the same person which the ISP says contained the virus Infostealer. Sometimes this happens but the file is ok. I saved it to desktop and ran AVG on it that said no virus but then inadvertently clicked on the file and the word doc was blank- which suggests it really was bogus. Now I'm afraid I've imported the virus. I'm running AVG as we speak and it's not finding anything. Did I import the virus? AVG has also just created a folder I never saw before in Outlook called AVG Virus Vault and there are two msg in there saying the worm I-Worm/Stration is in the attachment and it was moved to the vault. I never opened this bulk mail so not sure how AVG moved it. But what should I do with this? Delete the msg? Am I infected? Shall I run an HJT? thanks

11-07-2006, 09:27 AM	#2 (permalink)
originale Registered User Join Date: Sep 2004 Posts: 441 OS: winXP	Follow upbestbuy.com originator? BTW-seems to be coming from bestbuy.com Makes me worry about buying stuff online or registering with many of these companies online? Shd i be worried that their databases get hacked into?

11-08-2006, 12:59 PM	#3 (permalink)
originale Registered User Join Date: Sep 2004 Posts: 441 OS: winXP	Bump- No Takers virus infostealer and I-Worm/Stration I received 2 emails from my ISP from the same person which the ISP says contained the virus Infostealer. Sometimes this happens but the file is ok. I saved it to desktop and ran AVG on it that said no virus but then inadvertently clicked on the file and the word doc was blank- which suggests it really was bogus. Now I'm afraid I've imported the virus. I'm running AVG as we speak and it's not finding anything. Did I import the virus? AVG has also just created a folder I never saw before in Outlook called AVG Virus Vault and there are two msg in there saying the worm I-Worm/Stration is in the attachment and it was moved to the vault. I never opened this bulk mail so not sure how AVG moved it. But what should I do with this? Delete the msg? Am I infected? Shall I run an HJT? thanks originale is online now Report Post Reply With Quote Multi-Quote This Message Quick reply to this message originale View Public Profile Send a private message to originale Find More Posts by originale Add originale to Your Buddy List My System Information Old Yesterday, 11:27 AM #2 (permalink) originale I helped the forums. originale's Avatar Join Date: Sep 2004 Posts: 359 OS: winXP Follow upbestbuy.com originator? BTW-seems to be coming from bestbuy.com Makes me worry about buying stuff online or registering with many of these companies online? Shd i be worried that their databases get hacked into?

11-08-2006, 07:23 PM	#4 (permalink)
dorts Analyst, Security Team Join Date: Mar 2006 Location: Singapore Posts: 1,599 OS: Windows XP SP2 My System	Yes, I would recommend you to run HJT. You shouldn't open things you are unsure of. Please follow MicroBell's 5 Step process outlined here After running through all the steps, best thing to do is have one of the HijackThis helpers take a look at a log. Please download HijackThis - this program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded. Click on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\ Double click on HijackThis.exe to run the program. 1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'. 2. If you don't get the intro screen, just hit Scan and then click on Save log. 3. Post the hijackthis.log file in the HijackThis Log Help forum. Do not fix anything in HijackThis since they may be harmless. __________________ If you think TSF have helped you, please kindly donate to TSF and help keep this site free to all.

11-10-2006, 02:11 PM	#5 (permalink)
originale Registered User Join Date: Sep 2004 Posts: 441 OS: winXP	can't run any of the virus checkers Had already run Ad Aware, CW Shredder and Spy bot. Don't know why= but couldn't get far with other virus scanners. Tried them all. Panda wouldn't fix because kept on saying pop up blocker was on when it wasn't. Mc Afee ID'd a virus but there was no option to fix it. Symantec wouldn't go. E-Scan couldn't enable. On and on. So not sure what is happening. Also, not sure whyAVG didn't pick this virus up that is in my computer. What do you suggest if I can't run any of the virus checkers? Shall I just run an HJT anyway?

11-10-2006, 03:03 PM	#6 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,449 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Hi originale Please follow dorts' suggestion and post a log. Remember that no one scanner will pick up everything. It's best to get poperly checked out now, as one infection could also let others in to your system. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner