Shoutbox

Nullsoft!! - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: Nullsoft!! (/showthread.php?tid=67672)

Nullsoft!! by Lourix on 10-25-2006 at 04:35 PM

I downloaded Winamp the other day and then I started to notice that my computer started freezing so I did a virus scan and now according to my anti virus I have a virus from Winamp. So now my computer keeps on freezing. Since my main Anti Virus doesn't work in safe mode I used AVG to delete the virus and it didn't find anything. With my main one I picked up three types Win32.Worm.VB.DW, Magnet and this thing called Backdoor.Servu.AJ. Another sad thing is I got the Win32 worm in Quarrintine and I can't delete it! I'm not giving on my computer yet so has anyone got any ideas that can help me? I can't believe it is from Nullsoft.   


RE: Nullsoft!! by absorbation on 10-25-2006 at 04:37 PM

Winamp does not contain a virus. It could be something hooking onto Winamp or just a poor virus system accusing of anything that connects to the Internet to be a virus :P


RE: Nullsoft!! by Lourix on 10-25-2006 at 04:39 PM

Look and your probably right.


RE: Nullsoft!! by Lourix on 10-25-2006 at 04:44 PM

Yes I did get it from Winamp.com any ideas on how to destroy these viruses?


RE: Nullsoft!! by Jesus on 10-25-2006 at 04:49 PM

I've never had any problems with nullsoft/winamp, at least not of this kind.

I googled some info on them, Win32.Worm.VB.DW seems to spread via P2P, so that one is quite unlikely to come from Winamp.
The other one is not too well documented, but I found that it's also known by some other names

quote:
Submission: 235176
Sender: Jotti
Added: Trojan.Servu.27
Virus name alias: Trojan-Dropper.Win32.Agent.amr (Kaspersky AVP),
Trojan.NtRootKit.40 (Drweb), Backdoor.Servu.AJ (Bitdefender)
So I googled "Trojan-Dropper.Win32.Agent.amr" and it came up with this site (among others ofcourse), which states it can be removed with Spyware Doctor

Good luck
RE: Nullsoft!! by Kenji on 10-25-2006 at 04:50 PM

quote:
Originally posted by Lourix
Yes I did get it from Winamp.com any ideas on how to destroy these viruses?
Get a better virus protection program? try avg free

boot in safe mode, run a virus scan, then get avg free to remove it. reboot in normal, and download winamp again and install.

RE: Nullsoft!! by Lourix on 10-25-2006 at 04:52 PM

Well I did that and AVG free didn't find any viruses but my others did. So AVG is no good for me and my internet is getting really slo


RE: Nullsoft!! by Jesus on 10-25-2006 at 05:31 PM

or the other ones are generating false positives.
Have you looked at the symptoms in the first link I provided?
I use AVG free and I use an online scanner on a regular basis and I never had a virus AVG didn't notice.


RE: Nullsoft!! by absorbation on 10-25-2006 at 05:33 PM

quote:
Originally posted by Lourix
Well I did that and AVG free didn't find any viruses but my others did. So AVG is no good for me and my internet is getting really slo

ABG is good because it is not full of hype. Some virus programs seem to find anything related a virus. OMG it's connects to the Internet, VIRUS! Hey, your anit-virus could be making your PC slow, they use a lot of resources, that is why AVG is great, fast, smooth, correct results :P
RE: Nullsoft!! by Lourix on 10-25-2006 at 05:41 PM

Well My main Anti Virus picked up that win32 thing and AVG didn't so I'm not sure.


RE: Nullsoft!! by Woraug on 10-26-2006 at 02:18 AM

I use AVG Pro, and it rocks.  I used Norton for a while, but it kept detecting stupid shit as viruses.  It kept telling me that Spybot Search and destroy was a virus.


RE: Nullsoft!! by DarkMe on 10-26-2006 at 02:45 AM

Finish process > Delete from win32
its what i do, but you have to know what process is the worm an the delete the files that come with it.
Avg should do it, but spyware doctor is better