Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Email Contained I-worm/mabutu


  • Please log in to reply
4 replies to this topic

#1 ellenh

ellenh

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:WALSALL
  • Local time:09:17 PM

Posted 24 February 2008 - 04:34 AM

I got up today checked my email and it said talktalk have deleted and put a virus in the virus vault of avg an email off some pr*t it is in the virus vault now but how can i tell if this has not affected the rest of my computer and how do i get rid completely
:trumpet: :thumbsup: :flowers:

its called I-WORM/MABUTU

THANKS

ELLEN

BC AdBot (Login to Remove)

 


m

#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:17 PM

Posted 24 February 2008 - 08:44 AM

When an anti-virus quarantines a file by moving it into a virus vault (chest), that file is essentially disabled and prevented from causing any harm to your system. The quarantined file is safely held there and no longer a threat until you take action to delete it. One reason for doing this is to prevent deletion of a crucial file that may have been flagged as a "false positive". If that is the case, then you can restore the file and add it to the exclusion or ignore list. Doing this also allows you to view and investigate the files while keeping them from harming your computer. Quarantine is just an added safety measure. When the quarantined file is known to be bad, you can delete it at any time.

"Understanding AVG7 Free Virus Vault"
"AVG FAQ #647: I have some files in the AVG Virus Vault. What next?"

After deletion, perform a full system scan with your anit-virus in "Safe Mode". Then perform an Online Virus Scan like BitDefender.
(These require Internet Explorer to work. Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component. If given the option, choose "Quarantine" instead of delete.)
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 ellenh

ellenh
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:WALSALL
  • Local time:09:17 PM

Posted 24 February 2008 - 11:39 AM

hi i just went to virus vault and i will re-type what it says:

object name: document.zip
virus identified : I-WORM/MABUTU
date of detection: 2/24/2008 9:13:46 AM
SOURCE COMPUTER: 1-7e47174d68db4
finder: system
more details: envelope to husky74@talktalk.net

#4 ellenh

ellenh
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:WALSALL
  • Local time:09:17 PM

Posted 24 February 2008 - 11:49 AM

sorry pressed return before finished

more details: envelope to husky74@talktalk.net
rec from : wmsmtp.opaltelecom.net ([62.24.128.253] helo=...
by mailin-3.opaltelecom.net with esmtp (Exim 4.44) id 1JT4Nt-0000L6-A8
for husky74@talktalk.net;Sun,24 Feb 2008 00:06:25 +0000
X-IronPort-AV:E=Sophos;i="4.25,396,1199664000";
v="W32/Mabutu-A'0'v",
d="scr'96?zip'96,48?scan'96,48,208,96,48";a="533475984"


plus loads more

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:17 PM

Posted 24 February 2008 - 12:00 PM

Then delete them and perform the online scan I recommended.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users