Internet viruses

Well, so far, I have only received viruses via e-mail.

It sounds like either the clients PC, or the ISPs servers have been hacked.

A firewall would definetly be the way to go.

You need to make sure that the PC is clear of any hacker programs first though.
The 'best' way to ensure that no hacker programs exist, is to format the drive and re-load Windows.

If a hacker has already gotten ahold of the PC, then the IE5 update will not block them.

If this were my system, I would:
Backup critical files and settings.
Fdisk, and format the HDD.
Re-install the OS, drivers, security updates, applications.
Then, install a firewall such as Zone-Alarm.

If Zone Alarm detects repeated attacks, I would try a different ISP, or at least have the present ISP change any fixed IP addresses in use.

Chas

Well, I know that Bugbear and Opaserv are both network-share spreading virii. They travel using NetBIOS over TCP/IP.
Basically, they can push themselves onto an unscreened Windows machine.
A firewall will help you.
Firewalls will block in inbound TCP port 139 connection attempts that these virii make in order to infect their targets.
(actually, I think Bugbear hits TCP port 137 first, then it goes to 139, but those details don't really matter)

Either way, a firewall is what you need. Irun one on my dial-up machine, and I see connection attemps on it all the time!

hope this helps

LET'S NOT KILL THE WHOLE SYSTEM YET!!!

In this case I strongly disagree with Chas, who in my opinion is one of the TOP-GUNS of this forum. This is bad advice for two reasons.

1. These viruses can be sucessfully removed.

2. Why go throughall the trouble of reloading and trying to find drivers and software. Disk may be gone. There's the issues of software keys, passwords, internet/email settings and so on. Yes data can be saved but by formatting the drive important information can belost that wasn't thought of before the backup was performed.

These are probably coming through email. But detecting and deleting infected files is only part of what it takes. There may be as it is in this case other steps needed to completelyclean the system.

There's a simple to use removal tool for W32/bugbear on Symantec's site. Read the whole article and closely follow all instructions.
Copy the link and paste it in the address bar, remove any spaces.

http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@mm.removal.tool.html

The variant of W32/Opaserv that your customer is infected with uses brasil as a partner.
Go to this link and closely follow instructions for detection and removal.

http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.g.worm.html

Download the patch from microsoft,
http://www.microsoft.com/technet/security/bulletin/MS00-072.asp

Good luck, hope I posted in time to save you from further disaster.

I run Zone Alarm and it works like a charm.

For your situation I would suggest, after running Zone Alarm and getting all of your Microsoft Updates, using ?The Cleaner? from http://www.moosoft.com/. It detects Trojan ?viruses? on your computer and will remove them. Another good product I would recommend running is Ad-Aware from http://www.lavasoftusa.com/. That will help if SpyWare has been installed? which, by the sounds of it, may just have well been.

All of those products are availablefor free.

Good luck!

I've had several clients in the same situation. All were running WIN98SE. It is very time consuming to get rid of these viruses when they start. Even applying several removal tools and latest definitions won't solve it, especially when several PCs on a LAN have been infected.
As someone else suggested, save data files and re-install. I'd suggest W2000.

1. I would definately get a firewall protection. Either zone alarm or Tiny.

2. Get Ad-aware to remove spyware which may be on your PC.

3. I would also get a trojan-horse remover which may be the Virus that's already on your PC.

you can findall of these for free on Download.com

I hope this was some help and good luck.