it says i have to reinstall my anti virus program, but i just renewed it and i'm afraid if i uninstall it, i'll have to pay again.the virus name is W32.Feebs . oh, yeah how do i uninstall something. i forget. please excuse my computer illiteracy.
2007-02-27 12:48:43 · 4 answers · asked by chris j 7 in Computers & Internet ➔ Security
I just started having that same problem about an hour or so ago as well. It (so far) only happens when I try to open Yahoo! Mail Beta, and -- judging by all the other questions and answers that have started popping up on Answers in the last 5 or 6 hours -- is connected to Yahoo! Mail Beta specifically. Do a search here on Answers, and you'll find a lot more info on the current problem.
According to most of the major online anti-virus sites (and a few I hadn't even heard of), W32.Feebs spreads in two ways:
(1) Through e-mails disguised as security warnings of some sort, using random security-related names and subject lines. It gives you a log-in name and a password (for some reason I haven't figured out yet) and instructs you to open the attached file. The attached file is an .HTA file.
(2) Through files obtained from peer-to-peer (P2P) file-sharing networks (Limewire, Bearshare, torrent sites, etc). The file looks like a cracked version of one of several popular computer programs, and usually has something in the filename like "full version + crack" or something.
According to the anti-virus sites, opening one of these is the only way to be infected by this worm. Supposedly, it can't execute itself. The user has to actually attempt to run the file.
One thing that makes it difficult to find on your computer: Apparently the virus uses rootkit functionality to hide its files, registry subkeys, etc. on your computer. I.e., if you go looking for the specific files on your system, you won't find them. I don't know if that means that your anti-virus program won't find them either (still looking up that info), but Norton's site says that the virus alters or deletes some of the files that Norton uses to operate correctly, so they suggest re-installing Norton. I'm waiting to do that until we can figure out if this is a real virus...
That being said, a lot of people on here are suddenly reporting this same problem today, and, in pretty much every case, it happens when they try to access Yahoo! Mail Beta (the regular Yahoo! Mail doesn't seem to have the same problem).
Also, one of the other answerers on here said that he'd talked to Yahoo! tech support, and they were working on the problem on their end. He didn't go into tons of detail, but it sounded like THEY have the virus and are currently trying to get rid of it. I don't know if that's true, because I'm reporting second hand info (so don't hold me to it), but it's worth investigating further.
From what I'm hearing, I'm hoping this is a false alarm resulting from some sort of miscommunication between Yahoo! Mail Beta and the anti-virus progs. Or that it's a problem on Yahoo's servers and not actually infecting our computers. Either way. All I know is that, if Yahoo! Beta infected my computer, I will be very angry...
When you get the warning, does it say that the infected file is in \Local Settings\Temporary Internet Files\Content.IE5\(some long string of numbers and letters), and that it can't repair this file because access to it is denied? Then, once you click OK, it says it resolves and repairs it? Just wondering if we're all having the exact same problem...
Anyway, I'm going to keep digging (and scanning), and will add whatever info here I can find.
Good luck! Hopefully this is just a false alarm...
2007-02-27 20:37:07 · answer #1 · answered by Anonymous · 0⤊ 0⤋
W32.feebs - General Description:
W32.Feebs is a detection for a family of mass-mailing worm that also spreads through file-sharing networks and lowers security settings on the compromised computer. The worm may also send confidential information to a remote attacker via FTP.
The worm arrives as an email attachment with an .HTA extension.
If your computer is infected with w32.feebs hijacker then , It is highly recommended to remove w32.feebs as it does transfer back and forth information from the infected computer which makes it a potential for data theft.
I got all these informations from the below link, there you can get manual and automatic removal tool there...
http://www.nosnoopware.com/worms/removal/w32.feebs-remove.htm
2007-02-28 00:13:12 · answer #2 · answered by john 2 · 0⤊ 0⤋
If you want to Uninstall the antivirus pgm( Name ?)
Start/Control Panel/Add remove Software
Select yr AVirus program , uninstall.
If you get an option to repair select it.
If working ok
stop
else
goto Internet download avg7.5 Free
from www.grisoft.com
2007-02-27 13:22:38 · answer #3 · answered by essbebe 6 · 0⤊ 0⤋
Hi,
You should use "Noadware".This software is very very effective.I don't have any more problems with spyware/pop-up or virus since I used this software.Now,you can download and try "Noadware" for FREE.Check it out here:
http://ez-mart.biz/noadware.htm
2007-02-28 07:41:54 · answer #4 · answered by Anonymous · 0⤊ 0⤋