To the FE for urgent action

  TOPCAT® 11:18 20 Nov 2004

Please delete my thread: "Government postpones........." The link is affected by a virus - I-Worm Bofra (not sure of the exact name) which I've now got on my computer. AVG 7 alerted me briefly before my PC froze completely but didn't manage to quarantine it in time. Further checks do not pick it up now and I cannot use System Restore either.
To stop it spreading further via my email addresses I've printed out my address book contents and deleted all in it before going online again.

Any ideas on getting rid of it please anyone? TC.

  Sir Radfordin 11:39 20 Nov 2004

Try [email protected]" title="[email protected]" TARGET="_new">click here for removal. Doesn't look like that link was infected.

I-Worm Bofra is an email worm

  Sir Radfordin 11:40 20 Nov 2004

Clearly that link won't work but do a google search for I-Worm Bofra removal and you should find a tool from Symantec to get rid of it

  Forum Editor 11:40 20 Nov 2004

and thanks for the rapid alert. The link you posted did indeed drop the Iworm/Bofra virus.

Anyone who's stuck with this virus can run a free removal tool
[email protected]" title="[email protected]" TARGET="_new">click here for more information.

  Forum Editor 11:42 20 Nov 2004

as Sir Radfordin. Just click on the blue text to go to the removal tool page.

  Sir Radfordin 12:00 20 Nov 2004

PS - despite clicking on the link (for research purposes!) and runing Symantecs tool the virus has not been found on my PC. Hopefully you get the same end result.

  Forum Editor 12:14 20 Nov 2004

although it does need email to replicate. The worm actually exploits an Internet Explorer vulnerability, and Microsoft is currently writing a security update for it.

When you have an infection the worm places a hyperlink in outbound mail The link points back to your own machine, and when the link is clicked the accessing computer is infected by code that has been dropped in your machine. It's clever, and difficult to spot. AVG will pick up a couple of files, but at the moment there's no guarantee it will fix the virus.

Go to the removal tool link that's posted above, and follow the instructions PRECISELY.

  TOPCAT® 12:19 20 Nov 2004

I've run the Symantec tool and it stated no Bofra virus on my computer. Could this be because I'd already removed everything in my Address Book? Surely there would be some registry entries to get rid of. TC.

  Belatucadrus 12:30 20 Nov 2004

click here for another Bofra cleaner

  spuds 12:52 20 Nov 2004

Replied to TC's original post,nothing showed on my computer safeguards.Checked with Belatucadrus's download cleaner. Nothing reported.

  TOPCAT® 13:34 20 Nov 2004

I've run the Sophos eradicator tool and it too gives me a clean bill of health. Blessed if I know what happened but I think cleaning out my Address Book sort of killed it.

Closing this thread now but another is continued in the Helproom. Thanks everyone for your help. TC.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

iMac Pro review

Illustrator of witty, relatable Instagram comics Julia Bernhard touches on our humble moments

iMac Pro review

Quelle est la meilleure application de podcast pour Android (2018) ?