Shoutbox

"Cookierevised" virus - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Messenger Plus! for Live Messenger (/forumdisplay.php?fid=4)
+---- Forum: WLM Plus! Help (/forumdisplay.php?fid=12)
+----- Thread: "Cookierevised" virus (/showthread.php?tid=59302)

"Cookierevised" virus by repyck on 05-12-2006 at 07:19 AM

Hello

I have a very big problem. I don't have any budy list anymore.

I have read this post http://shoutbox.menthix.net/showthread.php?tid=57167 and I think I have downloaded the fake version from the virus author cookierevised because the file downloaded have a similarar name but I am not sure because I have tested several antivirus and antispyware and they don't find anything.
I have uninstalled the problem. But the problem is still here.

What must I do for my budy list to come back ?


RE: "Cookierevised" virus by NiteMare on 05-12-2006 at 07:29 AM

if every contact is gone from your list there is nothing you can do, the virus did not simply hide it, it has deleted them, you have to add them all back, please, in the future, do not download plus from anywhere other then the offical site


RE: "Cookierevised" virus by Chris4 on 05-12-2006 at 08:07 AM

I'm not entirely sureif this will work, but you could try going to tools > privacy > and look on the allowed list. Your contacts should still be on the list. Or try clicking on "View..." to see contacts that have added you in the past.

Thinking of it, you can also check your Messenger Logs and Messenger Plus! Logs to revive your contacts.

Messenger Plus! Logs - C:\Documents and Settings\USERNAME\My Documents\My Chat Logs
MSN Messenger Logs - C:\Documents and Settings\USERNAME\My Documents\My Received Files\<name and numbers>\History

USERNAME = your Windows Account Name.
<name and numbers> = Example, chris4158979229. Click one that is appropriate.


RE: "Cookierevised" virus by haydos on 05-12-2006 at 08:14 AM

quote:
Originally posted by repyck
I have downloaded the fake version from the virus author cookierevised
I would just like to make a note to repyck and everybody else about this that CookieRevised is not the author of this virus. Somebody changed the name to that to try and give CookieRevised a bad name
RE: "Cookierevised" virus by CookieRevised on 05-12-2006 at 12:14 PM

I would like to explicitly repeat that I am NOT the author of that virus, nor is Patchou (neither of us are that dumb to sign something like that with our own name, let alone we would create something like that in the first place).

Someone out there simply made those virusses to give Messenger Plus!, Patchou and me a bad name.

Never ever download any program from sites other than the official sites!!!!!! This doesn't only go for Messenger Plus!, but for any program you download.

Again, I'm sorry you got the virus, but nor Patchou nor me are the authors.

--

On that note, I would like you to send me that virus so we can investigate what it exactly does. In that way we can give people, who unfortunatly downloaded and executed the virus, proper advise and a possible fix.
You can mail the file(s) to cookie@msgplus.net.

Thank you


RE: "Cookierevised" virus by RaceProUK on 05-12-2006 at 02:42 PM

Also, maybe mail it to Symnatec, McAfee, etc? They're in the business of fighting viruses after all.


RE: "Cookierevised" virus by Sunshine on 05-12-2006 at 02:51 PM

quote:
Originally posted by raceprouk
Also, maybe mail it to Symnatec, McAfee, etc? They're in the business of fighting viruses after all.
I don't see what good that would do...it's a program/script whatever that deletes your contacts by sending a message to MSN/WLM servers as soon as you log in (that's for sure...what else if anything else is yet to be found out). They can't prevent such a thing because afterall you can send that message to the servers yourself aswell. The only thing that helps in these kinda situations is people to distrust/not download software from elsewhere than the official websites (curiosity killed the cat).

Plus we don't want Plus!, Patchou and Cookie to get an even worse name now do we?
RE: "Cookierevised" virus by RaceProUK on 05-12-2006 at 02:53 PM

But background scanning could detect the program as it's downloading, or once it's been extracted and then executed.


RE: "Cookierevised" virus by Sunshine on 05-12-2006 at 03:24 PM

quote:
Originally posted by raceprouk
But background scanning could detect the program as it's downloading, or once it's been extracted and then executed.
I say let Cookie investigate the thing, if need be (and if he sees it necessary) he can send it through....