GTAStunting

General => General Discussion => Computer Talk => Topic started by: KillaMarci on June 09, 2007, 06:47:28 AM

Title: VIRUS!
Post by: KillaMarci on June 09, 2007, 06:47:28 AM
Hey



Andy/Cobror-Unbroken sagt:
your name is photos?  


KM sagt:
meine heißen Fotos !  



I accepted some rar with photos from blaze on msn....
then i opened it and it was in .scr format , i cliked on it and my pc fucked up

now my name on msn is "photos and im writing and sending the phtos to all my msn accounts


DONT ACCEPT THEM


 fuck ...help me
Title: VIRUS!
Post by: VenomX on June 09, 2007, 06:49:41 AM
Haha, idiot .  He tried to send them to me saying 'its only my photos!'.  But visit this, it should fix everything:
http://www.pandasoftware.com/products/ActiveScan.htm (http://www.pandasoftware.com/products/ActiveScan.htm)
Title: VIRUS!
Post by: DeathCobra on June 09, 2007, 06:49:52 AM
 I got lucky. They got cancelled coz i was in VC

EDIT: Might be worth setting up msn to scan stuff with yer anti-virus once its been sent for stuff like this.
Title: VIRUS!
Post by: Vicarious on June 09, 2007, 06:51:18 AM
woah, what else does it do to your comp? apart from automatically sending the file to all your friends?
Title: VIRUS!
Post by: Aeneon on June 09, 2007, 06:51:59 AM
LOL DC Nearly accepted it fro me
Title: VIRUS!
Post by: VenomX on June 09, 2007, 06:52:42 AM
The worm has the ability to download and execute more files, initiate a DoS attack and steal stored passwords from the infected machine.
Title: VIRUS!
Post by: KillaMarci on June 09, 2007, 06:53:59 AM
Quote from: VenomX
The worm has the ability to download and execute more files, initiate a DoS attack and steal stored passwords from the infected machine.


...that means?? Is it any dangerous?
Title: VIRUS!
Post by: VenomX on June 09, 2007, 06:54:48 AM
Yeah, very.  Keylogger meets file deleter.
Title: VIRUS!
Post by: DriZzly on June 09, 2007, 06:58:54 AM
KM ill delete u from my MSN list untill this is over
Title: VIRUS!
Post by: Aeneon on June 09, 2007, 06:59:23 AM
LOL I Just need to restore and ima done.
Title: VIRUS!
Post by: KillaMarci on June 09, 2007, 07:01:45 AM
Quote from: DriZzly
KM ill delete u from my MSN list untill this is over


Sure


Fox is helping me over msn and vnc atm to get rid off it... hope it works, it going to delete the system32 thing
Title: VIRUS!
Post by: Turtle Dick on June 09, 2007, 07:11:45 AM
That wasn't a smart move
Title: VIRUS!
Post by: JayFoxRox on June 09, 2007, 07:15:47 AM
Venom -> Whats the name of this virus? i cant seem to find any leftovers and wine didnt like it all
Title: VIRUS!
Post by: BoBsaget on June 09, 2007, 07:25:20 AM
Pfoe, glad you went offline when I accepted them!
Title: VIRUS!
Post by: kilak on June 09, 2007, 07:33:50 AM
i have recevied some photos.zip files too
Title: VIRUS!
Post by: Brainkiller on June 09, 2007, 07:34:36 AM
I clicked it.

and it said threat alert so I clicked heal and everything was fine.
Title: VIRUS!
Post by: Link on June 09, 2007, 07:34:38 AM
http://www.bullguard.com (http://www.bullguard.com)
Title: VIRUS!
Post by: KillaMarci on June 09, 2007, 07:34:42 AM
So , i was writing with nucnuc , then he wrote some weird french things to me , and the screensaver came again... then i cluldnt move my mouse etc. and my pc rebooted O_O
Title: VIRUS!
Post by: KillaMarci on June 09, 2007, 07:36:03 AM
In der Datei 'C:\WINDOWS\system32\syshelps.dll'
wurde ein Virus oder unerwünschtes Programm 'Worm/IRCBot.23016' [WORM/IRCBot.23016] gefunden.
Ausgeführte Aktion: Zugriff verweigern
Title: VIRUS!
Post by: Brainkiller on June 09, 2007, 07:36:41 AM
Well let me put it this way.

If you were dumb enough to click it you deserve all the shit the virus does.
Title: VIRUS!
Post by: Link on June 09, 2007, 07:38:32 AM
install this

http://www.bullguard.com/try/bullguard-int...t-security.aspx (http://www.bullguard.com/try/bullguard-internet-security.aspx)

Update > full system scan.
Title: VIRUS!
Post by: Brainkiller on June 09, 2007, 07:38:52 AM
Quote from: KillaMarci
In der Datei 'C:\WINDOWS\system32\syshelps.dll'
wurde ein Virus oder unerwünschtes Programm 'Worm/IRCBot.23016' [WORM/IRCBot.23016] gefunden.
Ausgeführte Aktion: Zugriff verweigern
a search result was This (http://www.infos-du-net.com/forum/268603-11-gros-virus) maybe it'll help, but it's in french so I doubt it will
Title: VIRUS!
Post by: KillaMarci on June 09, 2007, 07:44:57 AM
Well , Fox gave me a progg to delete it , i deleted something now , well , let's see if its gone , if i write anything to anyone on msn please tell me..
Title: VIRUS!
Post by: VenomX on June 09, 2007, 07:46:04 AM
The virus/worm is called W32.Posse or W32.Mubla if you have new definitions.
Title: VIRUS!
Post by: KillaMarci on June 09, 2007, 07:47:23 AM
lol... It isnt gone , my antivir programm just said its still there , its the syshelps.dll in the system32folder
Title: VIRUS!
Post by: VaNilla on June 09, 2007, 07:47:53 AM
Brainkiller has it too, after I kept saying no, to this bot and what it says, it stopped .
Title: VIRUS!
Post by: Brainkiller on June 09, 2007, 07:55:14 AM
Quote from: Shadowsniper
Brainkiller has it too, after I kept saying no, to this bot and what it says, it stopped .
You're a dumbass, it was a picture of Peter Crouch doing the robot, ask DC I sent it to him because he had enough trust to accept
Title: VIRUS!
Post by: DeathCobra on June 09, 2007, 08:06:25 AM
Nucs tried to send it to me, as has KM...twice o_O
Title: VIRUS!
Post by: KillaMarci on June 09, 2007, 08:22:36 AM
File deleted , virus gone

:yay:


:ajaja:
Title: VIRUS!
Post by: Aeneon on June 09, 2007, 10:36:35 AM
^ I Think i have.

It said this when i booted up:

"One of your system files is damaged, A backup or long-term file has been loaded"

or something along the lines of that.
Title: VIRUS!
Post by: NuclearDeath on June 09, 2007, 01:48:02 PM
Damn, I've done a scan with avast and he find nothing, but the virus is here.

HELP ME PLZ.
Title: VIRUS!
Post by: VenomX on June 09, 2007, 01:48:48 PM
You tried that link I posted?  You need to be in IE for it to work.
Title: VIRUS!
Post by: godson on June 09, 2007, 01:51:56 PM
i am scared  
Title: VIRUS!
Post by: godamit on June 09, 2007, 05:08:20 PM
I got the same virus, but fixed it myself.
All you do, is go to the system32 file (found in the WINDOWS file), and search for rdchost.dll or something like that, there's another dll, similar name to rdchost, can't remember, sorry, and the third file to delete is the rar file "photo album". After that use Stinger (http://vil.nai.com/vil/stinger (http://vil.nai.com/vil/stinger)), and it should be gone. (Use the version which says it was updated on May 1st)
I followed these steps (didn't get them from anywhere specific so don't expect a help-link) and the virus was gone after that.

EDIT: To delete both .dll files, you might need to start-up your computer in safe mode, you can delete "photo album" without safe mode.
Title: VIRUS!
Post by: Joe on June 10, 2007, 08:39:28 AM
Don't you people have any AV's? I opened it the other day, and all 3 of mine alerted me
SimplePortal 2.3.7 © 2008-2025, SimplePortal