Dear Peter,
Thank you very much, once again.
Yes, it was rouge version of Novashield.
I tried both threatpost.com and McAfee Stinger, but no worm detected.
Regards
Nayake
From: PCSOFT - Personal Computer software discussion list [mailto:[log in to unmask]] On Behalf Of Peter Ekkerman
Sent: 27 October 2010 10:27
To: [log in to unmask]
Subject: Re: [PCSOFT] Spam Mail
Hello Nayake,
You're welcome.
I know of Nova Shield http://www.novashield.com/ ,but could it be that the
detection was Rogue Nova Shield?
Either way, Nova Shield is an anti-malware program ,but doesn't get very
high ratings ,so not really advisable.
If it's the rogue version of it, that may well cause problems ,but your
symptoms point to an email worm,
like Email-Worm.Win32.Nyxem.e or a virus "Here you have" Virus (aka
W32/VBMania@MM)
The 2nd one seems more indicative of your problem. See
http://threatpost.com/en_us/blogs/new-email-worm-turns-back-clock-virus-attacks-090910
and
http://blogs.mcafee.com/mcafee-labs/widespread-reporting-of-here-you-have-virus
McAfee Stinger has been updated to deal with this threat
http://vil.nai.com/vil/stinger/
You could also try Microsoft's Malicious Software Remover (Also included
with monthly update)
http://www.microsoft.com/security/malwareremove/default.aspx
You may not have to change your email address provided you have cleared the
system of the worm or virus,
but you have no way of knowing where your address was sent throughout the
world.
It is quite possible you might receive loads of spam ,but that can be
managed.
If you're prepared for that ,just keep your present address.
I did give some alternatives and still advise you to create a couple of
dummy addresses (as your "contacts") to check if
the malware is still active.
The idea is to temporarily avoid using real contacts to test your email.
I strongly recommend to use more than 1 email address for the reasons and
methods indicated in my previous post.
Too many people just use one email address for everything and because of
this, risk the address being compromised.
Hope you'll find the culprit.
Peter E.
--------------------------------------------------
From: "Dr NBP Balalla"
Sent: Tuesday, 26 October, 2010 10:46 AM
To: <[log in to unmask]>
Subject: Re: [PCSOFT] Spam Mail
Dear Peter,
Thank you very much for the advice.
As advised, I downloaded the malwarebytes and scanned my PC. It detected
“Rouge Nova Shield”. Could it be the culprit?
I usually download my yahoo mail to Outlook. I also cleared my yahoo
contact list and changed my password.
Do you think that I need to change my email address?
I appreciate your valuable advice once again.
With Best Regards
Nayake
PCSOFT's List Owners:
Bob Wright<[log in to unmask]>
Mark Rode<[log in to unmask]>
_____
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1152 / Virus Database: 424/3222 - Release Date: 10/27/10
_____
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1153 / Virus Database: 424/3228 - Release Date: 10/30/10
The NOSPIN Group has added a new feature on our website,
web based bulletinboard for questions and answers:
Visit our sister website at http://nospin.com
|
