Old 25-05-2005, 08:47   #1 (permalink)
Mik
Magazines™
 
Mik's Avatar
 
Join Date: Mar 2003
Location: Glasgow..
Posts: 11,758
msn virus

  Reply With Quote
Old 25-05-2005, 09:00   #2 (permalink)
Narate
Royalty™
 
Narate's Avatar
 
Join Date: Feb 2003
Location: Manchester (UK)
Posts: 3,272
Beers nearly gave it me before, good job I was out.

Does it affect Macs?
  Reply With Quote
Old 25-05-2005, 09:04   #3 (permalink)
smallbeer
I Ain't Losing Any Sleep™
 
Join Date: Apr 2003
Posts: 5,205
I think I just took out the whole of bradford.

for anyone I did send it too sorry. It was a trojan, part of the Win32.WinAd family if you need to track it down.
  Reply With Quote
Old 25-05-2005, 09:06   #4 (permalink)
Mik
Magazines™
 
Mik's Avatar
 
Join Date: Mar 2003
Location: Glasgow..
Posts: 11,758
I didnt open it but i doubt it would work on a mac.
  Reply With Quote
Old 25-05-2005, 09:17   #5 (permalink)
oli
I Call Shenanigans™
 
oli's Avatar
 
Join Date: Feb 2003
Location: Manchester, England.
Posts: 9,973
Stick tried to send it to me, Norton caught it though.
  Reply With Quote
Old 26-05-2005, 06:42   #6 (permalink)
Stickman
Dr. Lucien Sanchez
 
Stickman's Avatar
 
Join Date: Mar 2003
Location: UK
Posts: 5,563
It's ok. My homepage is a shopping portal, gay porn pops up on screen and windows keeps crashing.

Everything is back to normal.
  Reply With Quote
Old 26-05-2005, 07:02   #7 (permalink)
gray
i still want paying
 
gray's Avatar
 
Join Date: Oct 2003
Location: newcastle, uk
Posts: 4,769
no-one sent it to me
  Reply With Quote
Old 26-05-2005, 07:08   #8 (permalink)
Brown
volkswagen yellow & gold
 
Brown's Avatar
 
Join Date: Apr 2003
Location: london, england.
Posts: 6,147
here you go.
Attached Files
File Type: zip starwars.zip (22 Bytes, 27 views)
  Reply With Quote
Old 26-05-2005, 07:14   #9 (permalink)
smallbeer
I Ain't Losing Any Sleep™
 
Join Date: Apr 2003
Posts: 5,205
haha.

Stick, have you got rid of it? My anti-virus software deletes it but when you reboot it's back.
  Reply With Quote
Old 26-05-2005, 07:24   #10 (permalink)
Mik
Magazines™
 
Mik's Avatar
 
Join Date: Mar 2003
Location: Glasgow..
Posts: 11,758
just remove it from the register via regedit
  Reply With Quote
Old 26-05-2005, 07:40   #11 (permalink)
Stickman
Dr. Lucien Sanchez
 
Stickman's Avatar
 
Join Date: Mar 2003
Location: UK
Posts: 5,563
haha Listen to the expert. That won't do it.

There's loads of bits to track down. Try this:


Uninstall messenger.

Download these:

Gaobot
http://securityresponse.symantec.com...oval.tool.html

Bropia
http://securityresponse.symantec.com...oval.tool.html

Spyware Doctor
http://www.download.com/Spyware-Doct...-10377263.html

Disconnect.
Turn off system restore.
Run gaobot and bropia removals tools.
Run anti-virus. I use AVG.
Run spyware doctor.

Check for crappy folders relating to shopping or bargains in program files.
Check these for dodgy .exes etc:
c:\Documents and Settings\User
c:\Documents and Settings\User\Local Settings\Temp

Delete these if they're left:
c:\windows\system32\webrebates.exe
c:\windows\system32\winis.exe

Think that's it.
  Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search


Contact Us - Web Design Forums - Archive - Top
Search Engine Optimization by vBSEO 3.0.0 RC8