not a regular virus, just an annoying tool, which sends itself to all your contacts and signs you out

here is the link people will send you and you well send (if you click):
http://members.chello.nl/g.geurts/handcuffs.pif DO NOT OPEN

DO NOT DOWNLOAD THIS. THIS IS CLEARLY A VIRUS AND WILL SPREAD THROUGH YOUR CONTACT LIST.

m_e edit your post to remove the full link....

done just don't try modifying it or anything

you havnt done anything...


just add a extra : on to http://  to make it http:://

Yeah, somebody just tried to send this to me, I was about to click 'cause I'm really tired, and I read the *.pif part and was like... ARGH god no and just didn't press it and exited the conversation, surely you can somehow contact the hosts of that website and get it shut down...

quote:

---

Not Found
The requested URL /g.geurts/handcuffs.pif was not found on this server.

---

He removed the '1'.

are you sure this is just an annoying tool?or is it a virus?
becoz my girlfriend also sent me the link and she says she's not able to sign in anymore

The problem now is: nobody wants to test what it realy does and that's why there can't really be found a solution. I think deleting the file might help. (my brother had it, but he doesn't use MSN). It could be possible the file copies itself into an other directory.

I'd test it on a virtual machine and find out what it does, but I really can't be bothered right now :/

any one know the name? i think my mate has it

It's called handcuffs.pif and has a default MS-DOS application icon

Sounds like a Bropia variant (this originally was send as a file with .pif extension with default MS Dos icon).

News is on www.mess.be now too. I could test on a VM aswell, but the link in Segosa's screenshot is ded (404). I anybody has a working URL, just PM it to me.

I recommend everyone who opened it to change your password.. Someone told me that when you open it you password will be send in an e-mail to someone   have no idea if this is true but I thought I'd better tell here.. (If anyone knows more about this than tell)

I didn't open it because 3 persons gave me the link and all 3 did go offline after giving the link so..  also 2 of them normaly never talk to me so another reason to not open it

Stupid "virus things on msn"   Some people realy need to get a life

The virus signs off the user, not because it has the password (afaik)

anyone got the image that came with this virus??

Just thought id add that the origional virus (not the .pif extensions) is called Sexy ass.exe and has a DOS Icon (my mate told me it was a game and i believed him, see other thread)

* Pr0xY clicks link..... opps..... damnit...

I just got 3 IM's with the link, man there are some dumb ass people on my contact list.  Time to block them untill they get it off

this virus as affected millions of user Till now.. damn... and its self spreading.. damn!

There is a removal tool by Symantec:

URL: http://securityresponse.symantec.com/avcenter/ven....removal.tool.html
Download: http://securityresponse.symantec.com/avcenter/FxBropia.exe

It says it removes "W32.Bropia, W32.Bropia.J and W32.Bropia.N".... That suggests there are more versions which won't be detected by this removal tool, but I'm sure about that...

It is spreading and spreading fast, about 3 people on my contact list have it already, what pisses me off is that they dont do anything about it

quote:

---

Originally posted by lappin
It is spreading and spreading fast, about 3 people on my contact list have it already, what pisses me off is that they dont do anything about it

---

quote:

---

Originally posted by Scone
Just thought id add that the origional virus (not the .pif extensions) is called Sexy ass.exe and has a DOS Icon (my mate told me it was a game and i believed him

---

There appears to be very little information so far on this likely Bropia variant (possibly .N?) but so far I've found it can do one of 3 things when you first clicked the .PIF Link.

1- It will immediately close all FireFox and IE windows without notice, then God knows what else.

or

2- It will display a picture of a half naked handcuffed girl, send the link to others in your MSN contact list, then God knows what else.

or

3- It will open a website with a broken image, asking you to Run 'something' to view the picture, then God knows what else


Some reported symptons after any of the above so far include:
-CHKDSK no longer able to run.
-WINDOWS RESTORE no longer able to restore.
-ANTI VIRUS/ANTI SPYWARE/FIREWALL software mysteriously being Disabled.
-MSN Signing In and Out "on its own".
-Some users reported being that they're no longer able to connect to the internet.

Source:

code:

---

http://forum.mess.be/index.php?showtopic=5357

---

Ok first off, there's no need to rub it in(Segosa already did) ... but i got the virus
It installs an RBot variant, disables AV, shows a pic of a handcuffed girl, sends the link to everyone online, then closes MSN. I checked my startup folder and it has new entries: wini.exe and winis.exe. There's also a new process running, guess...wini.exe.

I already successfully removed RBot but i think it also installed a bropia variant . Now here's the weird part (and it got confirmed by a friend who sent me handcuffs...): sometimes, when typing a message, msn completely freezes (and it says doesn't react in taskmanager), then after a few minutes, it unfreezes again.

Ive got these on my pc.

titanic2.jpg.pif

She Could Fit Her Ass In A Teacup.pif

John Kerry as Super Chicken.scr

she's fuckin fit.pif

Me & you pic!.pif

Me Pissed!.pif

sexy.pif

Beautiful Ass.pif

You try and delete them and they just come back again. Any ideas how to get rid of them?

http://securityresponse.symantec.com/avcenter/ven....removal.tool.html

i think

why wud anyone create such a thing...or create viruses..tell me, do ppl create viruses or some just appear?

they create them, probably as sick jokes

bah fuckass fucktards!!!!

but i heard some viruses just appear, like out of bugs or sometin

There is no ONE reason for making a virus or a worm. Every person is different, and so are their reasons.

Edit: Ok, so whatever, I thought I was posting on another thread. @_@

Not sure if this has been mentioned yet, but (1) that sites offline (damn, I cant download it ) and (2) Users of Windows Server 2003 SP1 and Windows XP Service Pack 2, or Windows ME/98/95 Users with the JPEG fixtool installed are not affected by this virus.

As of now, I believe Symantec has released virus definitions for Norton users to protect against this threat.

quote:

---

Originally posted by Gillinghamfan
Ive got these on my pc.

titanic2.jpg.pif

She Could Fit Her Ass In A Teacup.pif

John Kerry as Super Chicken.scr

she's fuckin fit.pif

Me & you pic!.pif

Me Pissed!.pif

sexy.pif

Beautiful Ass.pif

You try and delete them and they just come back again. Any ideas how to get rid of them?

---

quote:

---

Originally posted by SikStyles
but i heard some viruses just appear, like out of bugs or sometin

---

quote:

---

Originally posted by Violet
they create them, probably as sick jokes

---

but like, how do they make em, i mean there isnt like a tutorial out there that teaches u

quote:

---

Originally posted by SikStyles
but like, how do they make em, i mean there isnt like a tutorial out there that teaches u

---