[pchelpers] Re: Unknown attack

As a last ditch recovery you can boot from a floppy and use the DOS copy
functions to retrieve vital data before formatting the system. The
infection is not going to be active under these conditions.

The only risk involved is if a Word macro virus exists in a document and
you copy that too.

Tonia wrote:
> 
>  Hi all
> I've got the strangest thing happen to me yesterday while I was on
> line. I was reading an article in a newsletter from Cramsession and
> clicked on a link which said "Read More". What I got was a pop up
> window like what you get when you want to download something and it
> prompts you to save to disk or open in current window etc. Without
> thinking I clicked on Open....and that opened a Pandora box!  I
> noticed something being installed on my system. Before I could do
> anything to stop it, it was all over! So were my apps, Internet
> connection, Outlook Express email etc. Nothing works anymore. The icon
> of the Word Viewer turned into a black pokemon-like monster!
> I have been reading this Cramsession newsletter for some years. It's
> all about exams and certifications and other techie stuff. This
> particular article was on CompTIA suing Troytech so I didn't even
> think of reading what that pop up window was about.  After shutting it
> down I booted up my older machine to continue with my work. Later that
> evening, I went back to it and it seemed to work fine. Didn't give it
> a thought this morning when I started it up. But towards the later
> part of the morning it started to act funny! It killed my Lotus
> WordPro, even notepad won't start up! And the online mentoring chat
> window just went blank! I went to shut down at "Start" but  it refused
> to start! I normally use the winkey for that but seeing it won't work
> I used the mouse and what I got was a small square with a computer
> icon saying "shut down". But fortunately it worked and I managed to
> shut it down.
> I wonder if anyone here had this experience. I want to know what was
> planted on my machine. I'm using Win98SE on an HP Brio workstation.
> Never given me any problem till now.  I hope I'm not zombiefied!
> Any advice would be most appreciate...before I reformat which means I
> lose everything. Haven't backed up a thing yet!
> 
> TIA.
> Tonia
> 
> 
> ---------------------------------
> Do You Yahoo!?
> Get personalised at My Yahoo!.

-- 
Regards, John Durham <mailto:modec@xxxxxxxxx >
ICQ number 112663246
Fax/Phone 64 4 5286786
Award winning web site at http://modecideas.com?sig
https://www.paypal.com/xclick/business=john.modec%40xtra.co.nz&item_name=How+to+get+thousands+of+hits+to+your+website&item_number=ebook1&amount=19.97&return=http%3A//modecideas.com/dthanks.htm&cancel_return=http%3A//modecideas.com/dmaxhits.htm?sig
Open your PayPal account
https://secure.paypal.com/refer/pal=john.modec%40xtra.co.nz
Get paid to learn http://www.itpaystolearn.com/default.asp?ref_id=AAS007 
PC-HELPERS list subscribe/unsub at http://pchelpers.5er.com?sig
Get massive hits to your site
http://www.startblaze.com/cgi-bin/intro.cgi?11590
Classified ad site
http://www.spunge.org/~johndurh/cgi-bin/classifieds.cgi?sig

Good advice is like good paint- it only works if applied.

Other related posts: