What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » General » General Chit Chat » Strange .exe with plus title - worm alert - update with screenshot - Norton got it!!

Strange .exe with plus title - worm alert - update with screenshot - Norton got it!!
Author: Message:
unclegriff
New Member
*

Avatar
Yes??

Posts: 8
– / Male / –
Joined: Mar 2004
O.P. Shocked  Strange .exe with plus title - worm alert - update with screenshot - Norton got it!!
Hey All:  A friend of mine sent me an install icon for an app calling itself "msnplus8final".  Being a plus user for a long time this began many bells ringing - but also being inquisitve (stupid sometimes) I installed to see what it was.  WORM.  My zonealarm went frantic, gave me the name of the file that was calling itself kernal32.exe, yet it's wasn't there and is changing it's name. WORM.  Fortunately through ZA I was able to kill this process.  Anyone else got info on this nefarious item??  It's making the rounds via peer to peer, and the url for downloading it is not a site, just a link.  This nefarious item is hiding in system32 under the name of C:\WINDOWS\system32\ewhzrrl, according to my ZA, but just try to find it to remove it.  HAH.  I have put a screenshot(jpeg) of the install icon here as well so all can see what it looks like.  Well, trust Norton - found this nefarious little thing - W32.Kelvir was the worm, and it is gonzo.  Rock on all. (Y)

.jpg File Attachment: install ... worm.JPG (3.78 KB)
This file has been downloaded 140 time(s).

This post was edited on 08-16-2005 at 03:04 AM by unclegriff.
Nils illegitimae carborundum.  ROCK ON !!!
08-15-2005 05:11 PM
Profile E-Mail PM Web Find Quote Report
« Next Oldest Return to Top Next Newest »

Messages In This Thread
Strange .exe with plus title - worm alert - update with screenshot - Norton got it!! - by unclegriff on 08-15-2005 at 05:11 PM
RE: Strange .exe using plus in it's title - worm alert - update with screenshot - by Sunshine on 08-15-2005 at 06:34 PM
RE: Strange .exe using plus in it's title - worm alert - update with screenshot - by mwe99 on 08-15-2005 at 07:15 PM
RE: Strange .exe using plus in it's title - worm alert - update with screenshot - by unclegriff on 08-15-2005 at 08:49 PM


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On