Fwd: Do I have a virus on my MBR?
Hi This is a copy of a message I have sent to Support at S.u.S.E. and put on here for the information of all. Hope it is of help. I am using S.u.S.E. 7.0 Professional on a PC at home with a modem connection to the internet. If I invoke security in Netscape whatever is showing in the window and invoke Open Page Information there are two windows. In the top one is the page information but in the bottom one is the following text, "Whatchew talkin' 'bout, Willis?" and try as I may I cannot find it or get rid of it. I have re installed over 20 times, used lilo -u and fdisk /MBR in dos, reset my bios to its defaults and even installed Netscape 4.76 but all to no avail.. If I boot and instal direct from the CD without rebooting and initialise Netscape the text is there. I am sorry I only know a little German. Antivir when executed without arguement on a new installation returns "Verzeichnisse 1" so I suspect I have a virus on my master boot sector and I have no idea how to deal with it effectively. I really have been at this problem for nearly three weeks and am absolutely at my wits end and will be absolutely delighted if you can help me. This is only the second time I have asked for help, Roman was kind enough to put me right on the last occasion. Thanking you in anticipation. Graham Hamblin. -- ghamblin@btinternet.com S.u.S.E. Linux 7.0 ================== ------------------------------------------------------- -- ghamblin@btinternet.com S.u.S.E. Linux 7.0 ==================
On Fri, 26 Jan 2001, Graham Hamblin wrote:
I am using S.u.S.E. 7.0 Professional on a PC at home with a modem connection to the internet. If I invoke security in Netscape whatever is showing in the window and invoke Open Page Information there are two windows. In the top one is the page information but in the bottom one is the following text, "Whatchew talkin' 'bout, Willis?" and try as I may I cannot find it or get rid of it.
Well, although a few Linux viruses do exist, none of them are in the wild. So I don't think you're infected with a Linux virus. (note: the AVPVE contains some description of Linux viruses, see http://www.avp.ch/avpve/otheros.stm). No (Linux) virus I'm aware of displays such an message (well, please do not expect I have 50000+ virus description in my memory ..:)).
I am sorry I only know a little German. Antivir when executed without arguement on a new installation returns "Verzeichnisse 1" so I suspect I have a virus on my master boot sector and I have no idea how to deal with it effectively.
Hum, do we ship a german version of H+B EDV AntiVir on the international SuSE Linux edition?! No, AntiVir shows an short summary at the end, what you get is (quick&dirty translated): ----- search results --- directories scanned: 1 files scanned: ? Infected: ? time: ? ------------------------ Please have a look at http://www.hbedv.com/download/download.htm to get the english edition of AntiVir. But H+BDV is not the only company offering a virus scanner for Linux, e.g. NAI, F-Secure or Sophos. (hehe, some of them even recommend AMaViS for doing virus scanning at your eMail server *bg*) HTH best regards, Rainer Link -- Rainer Link | SuSE - The Linux Experts link@suse.de | Developer of A Mail Virus Scanner (amavis.org) www.suse.de | Founder OpenAntiVirus Project (www.openantivirus.org)
On Fri, 26 Jan 2001, Graham Hamblin wrote:
I am using S.u.S.E. 7.0 Professional on a PC at home with a modem connection to the internet. If I invoke security in Netscape whatever is showing in the window and invoke Open Page Information there are two windows. In the top one is the page information but in the bottom one is the following text, "Whatchew talkin' 'bout, Willis?" and try as I may I cannot find it or get rid of it. Hehe, sorry, me again.
This message is shown by Netscape if you type in about:foo as URL :-) The same happens to about:about - so I assume it's always displayed if the word after about: is not a "keyword". You may try about:mozilla to get some other stuff. So, nothing to worry about. best regards, Rainer Link -- Rainer Link | SuSE - The Linux Experts link@suse.de | Developer of A Mail Virus Scanner (amavis.org) www.suse.de | Founder OpenAntiVirus Project (www.openantivirus.org)
Hi This is a copy of a message I have sent to Support at S.u.S.E. and put on here for the information of all. Hope it is of help.
I am using S.u.S.E. 7.0 Professional on a PC at home with a modem connection to the internet. If I invoke security in Netscape whatever is showing in
As far as the "Whatchew talkin' bout, Willis?" error, that, I am 99% sure, is a Netscape/Java error message. I've seen it on a Sun box. It's most like a problem between the browser and a class file. The rest of your message loses me. ----- Original Message ----- From: "Graham Hamblin" <ghamblin@btinternet.com> To: <suse-security@suse.com> Sent: Friday, January 26, 2001 4:27 PM Subject: [suse-security] Fwd: Do I have a virus on my MBR? the
window and invoke Open Page Information there are two windows. In the top one is the page information but in the bottom one is the following text, "Whatchew talkin' 'bout, Willis?" and try as I may I cannot find it or get rid of it.
I have re installed over 20 times, used lilo -u and fdisk /MBR in dos, reset my bios to its defaults and even installed Netscape 4.76 but all to no avail.. If I boot and instal direct from the CD without rebooting and initialise Netscape the text is there.
I am sorry I only know a little German. Antivir when executed without arguement on a new installation returns "Verzeichnisse 1" so I suspect I have a virus on my master boot sector and I have no idea how to deal with it effectively.
I really have been at this problem for nearly three weeks and am absolutely at my wits end and will be absolutely delighted if you can help me. This is only the second time I have asked for help, Roman was kind enough to put me right on the last occasion.
Thanking you in anticipation.
Graham Hamblin. -- ghamblin@btinternet.com S.u.S.E. Linux 7.0 ================== -------------------------------------------------------
-- ghamblin@btinternet.com S.u.S.E. Linux 7.0 ==================
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
Graham Hamblin wrote:
Hi This is a copy of a message I have sent to Support at S.u.S.E. and put on here for the information of all. Hope it is of help.
I am using S.u.S.E. 7.0 Professional on a PC at home with a modem connection to the internet. If I invoke security in Netscape whatever is showing in the window and invoke Open Page Information there are two windows. In the top one is the page information but in the bottom one is the following text, "Whatchew talkin' 'bout, Willis?" and try as I may I cannot find it or get rid of it.
I have re installed over 20 times, used lilo -u and fdisk /MBR in dos, reset my bios to its defaults and even installed Netscape 4.76 but all to no avail.. If I boot and instal direct from the CD without rebooting and initialise Netscape the text is there.
I am sorry I only know a little German. Antivir when executed without arguement on a new installation returns "Verzeichnisse 1" so I suspect I have a virus on my master boot sector and I have no idea how to deal with it effectively.
I really have been at this problem for nearly three weeks and am absolutely at my wits end and will be absolutely delighted if you can help me. This is only the second time I have asked for help, Roman was kind enough to put me right on the last occasion.
Thanking you in anticipation.
I've got 2 that do the same thing. I don't think it is a virus. -- Mark Hounschell dmarkh@cfl.rr.com
Graham Hamblin wrote:
Hi This is a copy of a message I have sent to Support at S.u.S.E. and put on here for the information of all. Hope it is of help.
I am using S.u.S.E. 7.0 Professional on a PC at home with a modem connection to the internet. If I invoke security in Netscape whatever is showing in the window and invoke Open Page Information there are two windows. In the top one is the page information but in the bottom one is the following text, "Whatchew talkin' 'bout, Willis?" and try as I may I cannot find it or get rid of it.
... First don't Panic. Try to type something like "about:lxdkrjgklxdgjghklxd" in the address field and watch the browser window. Juergen -- =========================================== __ _ Juergen Braukmann juergen.braukmann@gmx.de| -o)/ / (_)__ __ ____ __ Tel: 0201-743648 dk4jb@db0qs.#nrw.deu.eu | /\\ /__/ / _ \/ // /\ \/ / ===========================================_\_v __/_/_//_/\_,_/ /_/\_\
participants (5)
-
Graham Hamblin -
juergen.braukmann＠ruhr-west.de -
Kevin Creason -
Mark Hounschell -
Rainer Link