Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Web Buyers Guide
Go Back   Dev Shed ForumsSystem AdministrationAntivirus Protection

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Lose your application development headaches. Start developing and deploying applications with Advantage Database Server today. Download a 30-day trial for Free!
  #1  
Old November 29th, 2001, 08:51 PM
TigerTermite TigerTermite is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jun 2001
Posts: 12 TigerTermite User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Can just highlighting a email transfer a virus.

Hello,
I just received an email with an attachment.
I highlighted it so it could be deleted.
Once it was highlighted a window opened asking to save it to disk?
I clicked cancel and deleted the email.
Is it possible that I just got infected.
Thanks,
Paul

Reply With Quote
  #2  
Old November 29th, 2001, 09:57 PM
jdk's Avatar
jdk jdk is offline
phpkid ~~~~~~ :o)
Dev Shed Frequenter (2500 - 2999 posts)
 
Join Date: Nov 2000
Location: NJ, USA
Posts: 2,535 jdk User rank is Lance Corporal (50 - 100 Reputation Level)jdk User rank is Lance Corporal (50 - 100 Reputation Level)jdk User rank is Lance Corporal (50 - 100 Reputation Level) 
Time spent in forums: 11 m 11 sec
Reputation Power: 10
Send a message via Yahoo to jdk
No.
__________________
_____________________________
d.k.jariwala (JD)
~ simple thought, simple act ~
I blog @ http://jdk.phpkid.org

Reply With Quote
  #3  
Old November 30th, 2001, 12:18 AM
Datamike's Avatar
Datamike Datamike is offline
Web Developer
Dev Shed Novice (500 - 999 posts)
 
Join Date: Oct 2001
Location: Finland
Posts: 719 Datamike User rank is Corporal (100 - 500 Reputation Level)Datamike User rank is Corporal (100 - 500 Reputation Level)Datamike User rank is Corporal (100 - 500 Reputation Level)Datamike User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 11 h 27 m 33 sec
Reputation Power: 9
No.
__________________
-- Tomi Kaistila
-- Developer's Journal

The more you learn, the more you know.
The more you know, the more you forget.
The more you forget, the less you know.

Reply With Quote
  #4  
Old November 30th, 2001, 12:28 PM
SilkySmooth's Avatar
SilkySmooth SilkySmooth is offline
Newbie :P
Dev Shed Frequenter (2500 - 2999 posts)
 
Join Date: Jan 2001
Location: In the PHP Engine :-)
Posts: 2,880 SilkySmooth User rank is Sergeant (500 - 2000 Reputation Level)SilkySmooth User rank is Sergeant (500 - 2000 Reputation Level)SilkySmooth User rank is Sergeant (500 - 2000 Reputation Level)SilkySmooth User rank is Sergeant (500 - 2000 Reputation Level)SilkySmooth User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 11 h 12 m 25 sec
Reputation Power: 15
No.

But you should have a virus scanner checking incoming files, especially if you use Outlook or Eudora. A good free one is AVG from http://www.grisoft.com

HTH
__________________
---------------------
-- SilkySmooth --
---------------------
Directory Share | Free phpLD Mods | Little Directory

Reply With Quote
  #5  
Old November 30th, 2001, 07:06 PM
TigerTermite TigerTermite is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jun 2001
Posts: 12 TigerTermite User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Thanks everyone,
I don't ever open file attachments.
Do I still need virus protection?
Sincerely,
Paul

Reply With Quote
  #6  
Old November 30th, 2001, 07:53 PM
AlCapone's Avatar
AlCapone AlCapone is offline
Mobbing Gangster
Dev Shed Demi-God (4500 - 4999 posts)
 
Join Date: Sep 2001
Location: "Best City" 2002 and 2003- Melbourne, Australia
Posts: 4,913 AlCapone User rank is Corporal (100 - 500 Reputation Level)AlCapone User rank is Corporal (100 - 500 Reputation Level)AlCapone User rank is Corporal (100 - 500 Reputation Level)AlCapone User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 5 h 36 m 31 sec
Reputation Power: 13
Send a message via ICQ to AlCapone Send a message via AIM to AlCapone Send a message via Yahoo to AlCapone
I dont download and start any files from the net (unless from the very trusted source) so I dont even have an antivirus.
But attachment in an email is still #1 source of virii and trojan
__________________
And you know I mean that.

Reply With Quote
  #7  
Old November 30th, 2001, 08:20 PM
deepspring's Avatar
deepspring deepspring is offline
Is a Psycho
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2000
Location: In your computer
Posts: 231 deepspring User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 8
Send a message via AIM to deepspring Send a message via Yahoo to deepspring
I would recommend getting one, as someone said before you can get a pretty good free one called AVG, if you would prefer to buy one I recommend the following:

-*Kaspersky Labs AVP Toolkit Pro - http://www.avp.ru/
Symantec Norton Antivirus 2001 (with Norton Personal Firewall)
+Datafellows F-Secure Antivirus - http://www.datafellows.com/download...ase/tools.shtml

- = I think they give a lite dos version away free...
* = Known to slow certain programs startup down
+ = Gives a free dos version away (complete with a bg scanner).

The free dos versions are highly capable of removing any windows trojan or virus, but only the F-Secure one has a windows background scanner (sits on your tray bar).

I generally keep two AV's around a DOS one (F-Secure usually) and a windows one (usually Symantec Norton AV 2000) just to be safe.

Another good idea is to turn off your viewing pane in Outlook / Outlook Express, there are some new viruses that use an old MIME exploit to transmit themselves, so even if you don't open the attachment you can still get hit. Example:

http://www.avp.ru/news.asp?news=0&nview=1&id=229&page=2

http://www.avp.ru/news.asp?news=0&nview=1&id=223&page=3

http://securityresponse.symantec.co...trans.b@mm.html

http://www.microsoft.com/technet/tr...in/MS01-020.asp

Also, I recommend using WindowsUpdate to keep windows up-to-date as much as possible. That way you can be sure that most of the "olde" exploits can't be used.

Hope this helps in someway...
__________________
deepspring

- "Netscape 4 users are like lemmings... You can't help but laugh when one falls off a cliff"

Last edited by deepspring : November 30th, 2001 at 09:55 PM.

Reply With Quote
  #8  
Old November 30th, 2001, 09:36 PM
jdk's Avatar
jdk jdk is offline
phpkid ~~~~~~ :o)
Dev Shed Frequenter (2500 - 2999 posts)
 
Join Date: Nov 2000
Location: NJ, USA
Posts: 2,535 jdk User rank is Lance Corporal (50 - 100 Reputation Level)jdk User rank is Lance Corporal (50 - 100 Reputation Level)jdk User rank is Lance Corporal (50 - 100 Reputation Level) 
Time spent in forums: 11 m 11 sec
Reputation Power: 10
Send a message via Yahoo to jdk
I think getting an antivirus is a good thing to do. Cause right now virus are available which would infect your machine when you just read them through outlook express or similar clients. you dont even need to open the attachment.

So better get one. There are good free ones too. So why not to use them ???

JD

Reply With Quote
  #9  
Old December 1st, 2001, 10:49 PM
TigerTermite TigerTermite is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jun 2001
Posts: 12 TigerTermite User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Hello,
Well I hope this is the final chapter.
I installed Microsoft critical updates.
Then I purchased Norton Virus 2002.
It turns out I did have a virus.
Don’t know exactly where it came from,
but it was safely deleted and hopefully nothing bad will come from it.
Thanks to all for the advice, it was much apprieated.
Sincerely,
Paul

Reply With Quote
  #10  
Old December 5th, 2001, 12:29 AM
rycamor rycamor is offline
Gödelian monster
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Jul 1999
Location: Pembroke Pines, Florida, USA
Posts: 2,298 rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level) 
Time spent in forums: 3 Days 1 h 54 m 21 sec
Reputation Power: 41
I beg to differ with the "no" answers above, at least for Microsoft Outlook.

Outlook and Outlook Express have a default setting which displays the contents of the email in the bottom pane whenever you highlight the email in list view. There have been several viruses that needed nothing more than to be displayed in order to execute some malicious Jscript or VBscript code. I have seen these myself on several systems.

I think one of the more clever approaches was to use VBscript to pop up an innocuous-looking dialog box, with an OK, and Cancel button. The user would be tempted to click Cancel, rather than the "X" to close the window, which then allows the script to do anything it wants on the system. Translation: always click the X, if you are not sure what it is.

I believe much of this has been fixed in the most recent updates to Outlook, but I recommend never trusting Outlook to display unwanted emails.

You can change the default setting so emails are not automatically displayed when selected: Go to View->Layout, and uncheck the "Show preview pane" checkbox. Now you can get rid of a suspicious email without viewing its contents.
__________________
The real n-tier system:

FreeBSD -> PostgreSQL -> [any_language] -> Apache -> Mozilla/XUL

Amazon wishlist -- rycamor (at) gmail.com

Reply With Quote
  #11  
Old December 5th, 2001, 03:07 AM
jdk's Avatar
jdk jdk is offline
phpkid ~~~~~~ :o)
Dev Shed Frequenter (2500 - 2999 posts)
 
Join Date: Nov 2000
Location: NJ, USA
Posts: 2,535 jdk User rank is Lance Corporal (50 - 100 Reputation Level)jdk User rank is Lance Corporal (50 - 100 Reputation Level)jdk User rank is Lance Corporal (50 - 100 Reputation Level) 
Time spent in forums: 11 m 11 sec
Reputation Power: 10
Send a message via Yahoo to jdk
I mentioned it too.
and I think getting a good antivirus tool is best thing to do.

JD

Reply With Quote
  #12  
Old December 5th, 2001, 09:32 AM
rycamor rycamor is offline
Gödelian monster
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Jul 1999
Location: Pembroke Pines, Florida, USA
Posts: 2,298 rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level)rycamor User rank is Sergeant Major (2000 - 5000 Reputation Level) 
Time spent in forums: 3 Days 1 h 54 m 21 sec
Reputation Power: 41
Oh, yes... I see that post now, and the other one about turning off previewing. Guess I didn't read far enough.

Of course, if you are using Windows, a good antivirus program is a must.

And even so, the best thing to do is never use Outlook at all. Opera has a very nice email client that looks and acts just like Outlook Express, but has none of the ridiculous scripting vulnerabilities built into it.

For those who really depend on the full-featured Outlook, well, then I don't know what to say, but just always be prepared for disaster. An antivirus program only works AFTER the first few people have already been hit by the virus, so some of you will be hit, no matter what.

Reply With Quote
  #13  
Old December 5th, 2001, 09:44 AM
TigerTermite TigerTermite is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jun 2001
Posts: 12 TigerTermite User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Hello,
The name of the virus a got was Badtrans.
It did enter my system without opening the attachment.
You can get the technical details about the "Badtrans" worm at
http://www.symantec.com/avcenter/ve...trans.b@mm.html
I do use Outlook Express and will now change the settings.

Sincerely,
Paul

Reply With Quote
  #14  
Old December 5th, 2001, 10:43 AM
Mr_SpAcE Mr_SpAcE is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2001
Posts: 15 Mr_SpAcE User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
badtrans is pretty "bad"

I use outlook express, and norton AntiVirus, updated everytime there is an update (I am connected 24/24) gets the job well done. It scans incoming messages and when an attachment is a virus it asks if I want to repair, quarantine or delete.. I choose delete everytime.

But you don't have to open attachments to get a virus, if you use outlook (or probably others are this way) some messages opens web browsers as soon as you highlight the message. I'm sure there are a lot of wayt to send virus trhu those, but probably that a good anti virus will see them also directly when receiving emails from the server.

An anti virus cannot be bad, even if it's not the complete protection. This along with not opening attachments will get you pretty safe

Etienne

Reply With Quote
  #15  
Old December 5th, 2001, 11:04 AM
pabloj's Avatar
pabloj pabloj is offline
Modding: Oracle MsSQL Firebird
Dev Shed God 5th Plane (7000 - 7499 posts)
 
Join Date: Jun 2001
Location: Outside US
Posts: 7,372 pabloj User rank is Captain (20000 - 30000 Reputation Level)pabloj User rank is Captain (20000 - 30000 Reputation Level)pabloj User rank is Captain (20000 - 30000 Reputation Level)pabloj User rank is Captain (20000 - 30000 Reputation Level)pabloj User rank is Captain (20000 - 30000 Reputation Level)pabloj User rank is Captain (20000 - 30000 Reputation Level)pabloj User rank is Captain (20000 - 30000 Reputation Level)pabloj User rank is Captain (20000 - 30000 Reputation Level)pabloj User rank is Captain (20000 - 30000 Reputation Level) 
Time spent in forums: 2 Months 2 Weeks 1 h 29 m 7 sec
Reputation Power: 255
Besides an antivirus, do yourself a favor DROP OUTLOOK, use EUDORA or others. And also do not trust IE, try Opera or Netscape.

Reply With Quote