Author Topic: Win32GandaB Worm  (Read 5644 times)

0 Members and 1 Guest are viewing this topic.

Offline gingerlily

  • Jr. Member
  • **
  • Posts: 48
  • I'm a llama!
Win32GandaB Worm
« on: August 29, 2003, 08:29:54 PM »
I have been inundated with Emails from this worm. The email says it id from howard@htelephones.co.uk and the subject is nazi propaganda.

I keep deleting the email when Avast gives me the warning and I have blocked the sender on Outlook Express. But more emails come.

Today, when I ran an Avast AV scan, Windows said "ashampl"hjad caused an error and will be shut down..when I clicked OK, Avast disappeared..so is my AV programme infected..or what?

I just do not know what to do!

Please help.

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:Win32GandaB Worm
« Reply #1 on: August 29, 2003, 09:08:43 PM »
That does not nessesary mean that you are infected, but you could check your Windows in safe mode, or try this remove Tool: http://www.bitdefender.com/html/virusinfo.php?menu_id=1&v_id=58

BTW: Did you apply all updates offert by windowsupdate? An updated Outlook should not execute an attachement by itself.
MfG Ralf

Offline gingerlily

  • Jr. Member
  • **
  • Posts: 48
  • I'm a llama!
Re:Win32GandaB Worm
« Reply #2 on: August 29, 2003, 09:28:46 PM »
The attachment did not open..I was warned about the infection by Avast and anyway, I would never open any attachment unless I absolutely knew it was safe.

I did keep up to date with windows critical Updates..but Windows 98 is no longer supported.

Thanks for that link, I will use it.

Offline gingerlily

  • Jr. Member
  • **
  • Posts: 48
  • I'm a llama!
Re:Win32GandaB Worm
« Reply #3 on: August 29, 2003, 09:43:35 PM »
I downloaded the Bitdefender tool, but noted it was to fix Ganda A and my emails are Ganda B.

Can anyone also explain why Avast AV programme should have caused an error when I was ruunning it?

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:Win32GandaB Worm
« Reply #4 on: August 29, 2003, 09:54:18 PM »
I do not know why, but Bitdefender reports the b Variant as .a too.
http://www.virusbtn.com/resources/vgrep/vgrep.cgi?terms=w32%2Fganda&product=0
MfG Ralf

Offline gingerlily

  • Jr. Member
  • **
  • Posts: 48
  • I'm a llama!
Re:Win32GandaB Worm
« Reply #5 on: August 30, 2003, 12:57:01 PM »
Nothing Has Improved..the same email continues to arrive every day and is detected by Avast and deleted by me.

I went to your page about these worms, but really do not understand if this Ganda B could have infected my PC or is it just the nuisance Emails  (never opened) that are just a nuisance, but doing no more harm. I did a search for the "scandisk.exe file..but the screen told me it was not a valid file name....

Please advise what else I should do..is this little ******* residing in my PC, or does he just arrive with emails and is therefore deletable with no harm done?

You can see I am a really simple person..no technical knowledge at all..so please tell me in simple terms if there is anything else to do.

Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:Win32GandaB Worm
« Reply #6 on: August 30, 2003, 01:01:26 PM »
That  means that you are not infected but recieve only infected Emails. So that is no problem, if you do not open it.
So you are right just delete them.
MfG Ralf

Offline gingerlily

  • Jr. Member
  • **
  • Posts: 48
  • I'm a llama!
Re:Win32GandaB Worm
« Reply #7 on: August 30, 2003, 01:18:54 PM »
 :D

Well as Shakespeare once said "For that relief, much thanks"

Cheers

Gingerlily

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11805
    • AVAST Software
Re:Win32GandaB Worm
« Reply #8 on: August 31, 2003, 10:05:48 PM »
Btw, you can use our Virus Cleaner to check for Ganda (and heal the infected files, if there are any), too.