I was also caught out -setting up another PC for my daughter starting university. Checked that I'd set the email up correctly for her, and it was in the first mail received - I hadn't remembered to change lookout's default config. My virus checker that I'd installed a few days earlier was out of date! Noticing the problem immediately (it killed the Zone Alarm firewall), I disconnected, and used "find" to locate the files with the same create time as that of the email receipt. I tried to rename the suspicious files but couldn't -some were in use by windows, so I then booted to dos prompt, renamed them, and then did a scanreg /restore to go back to an older version of the registry.
Then, and only then did I go back online, updated my virus checker, ran it, (it confirmed that the renamed files contained bugbear), and deleted the files permanently. Rebooted, and ran the virus checker again -no viruses found -job done. One of the reasons that I'm very suspicious of the newer flavours of windows which suposedly aren't built on DOS is that if windows is using the files you can't delete them, but if you can't stop windows from using them .... I think it's only a matter of time before a virus is developed that cannot be successfully disembedded from Windows short of a full re-install. Actually, come to think about it, there are several out there already.. Windows 98, Windows Me, ... Jeremy ----- Original Message ----- From: <[EMAIL PROTECTED]> To: "ql-users" <[EMAIL PROTECTED]> Sent: Monday, October 07, 2002 7:52 AM Subject: Re: [ql-users] Caution- BugBear Virus (from another PC) First of all sorry for my bad english. and sorry also for the virus :-( I use AVG but my database virus was (sic!) out fo date. My error. No italian restaurant, mafia connection or other stupid post :-/ Now I've updated the database. AVG now detect the worm but can't remove it Any suggestion? Mr Bergen, antivirus are a good solution for the virus problem but is there any solution for your idiocy? :-/ Giorgio Garabello
