Shoutbox

That is how the virus spreads. It sends the link to the virus to all of the contacts on your list.

You may also want to see this thread: http://shoutbox.menthix.net/showthread.php?tid=39645

quote:

---

Originally posted by Dash

quote:

---

Originally posted by got_banned
Did people on your msn lists get a link from you?

---

suprisingly, no

---

I guess we don't have the virus?

1) If you clicked on the link then you have it in all certainty.

2) Any knowledge on the cure for this version of bropia? On mess.be it says theres a new virus coming around and gives the unhelpful advice 'keep your virus log uptodate'

Do we actually have a specific virus removal for the latest bropia worm?

This is obviously why some of the removal tools arent finding this newest worm.

Its a good thing i never clicked on the link but im annoyed as hell at all the crap im being sent.

If your problem is the same as what I was trying to solve, I have been advised that it may be the Kelvir virus, and to download ClamAV from http://prdownloads.sourceforge.net/clamwin/clamwi...setup.exe?download which will remove it. Still have ClavAV finishing a scan, and it has found something, so might be worth a go for you too.

When you click the link, it has to download first does it not? Unless ie thinks its a link and opens it automaticcily, you should be fine. Theres no possible way there can be code on a webpage thats executed unless its an activex object (and bropia isnt.) So - it should open a file download window, and THATS the virus. Click run on that and youll be screwed.

quote:

---

Originally posted by vincerooney
1) If you clicked on the link then you have it in all certainty.

---

... which I unfortunately hadn't predicted when I clicked the link.

After receiving the link from several infected contacts (who would then ask me what this virus was doing to their comptuer), I decided to update my virus definitions, download the file and scan it in order to read about it in Symantec's online virus encyclopedia. Of course I hadn't intended to execute the file, but to my horror it seemed to execute itself, and Norton remained idle.

Seems that Symantec didn't release virus definitions for this virus until March 6th, which explains why I was infected (at least partially; it didn't spread via messenger). However, I was able to remove the virus the day after using fully updated definitions... It discovered 4-5 infected files.

Erm, this isnt the bropia virus, in case you havent noticed .  It is W32.Kelvir.A@mm (Symantec Security Response - W32.Kelvir.A@mm).  The second link that was posted is W32.Kelvir.B@mm (Symantec Security Response - W32.Kelvir.B@mm).  Any users of Symantecs Norton AntiVirus, Norton Internet Security, Norton SystemWorks are already protected.  Symantec issued RapidRelease Emergency Virus Definitions on March 6th, 2005 at about 5PM Central Standard Time to prevent this threat.

There are 2 varients besides these, W32.Kelvir.C@mm (Symantec Security Response - W32.Kelvir.C@mm) and W32.Kelvir.D@mm (Symantec Security Response - W32.Kelvir.D@mm - Removal Tool for W32.Kelvir.D@mm).

If you cant tell, these viruses are coming out very fast, so fast in fact that Symantec has had to issue Emergency Virus Definitions for 2 or 3 of these varients.

quote:

---

Originally posted by Dane

If you cant tell, these viruses are coming out very fast, so fast in fact that Symantec has had to issue Emergency Virus Definitions for 2 or 3 of these varients.

---

i wondered why i kept getting a "your virus definitions are now up to date" pop-up more times than usual...

This notice is off of the MSNBC Tech & Gadgets: Virus & Security page:

"Instant message worm attacks increasing

Experts warn users to be wary of links sent over IM"

http://www.msnbc.msn.com/id/6448213/did/7120241/?GT1=6305

Please be sure your antivirus definitions and software are installed and up-to-date.

Viruses are on the rise for MSN Messenger, actually, MSN Messenger is becoming the primary medium it seems for viruses.  That article says as much.