What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Skype & Technology » Skype & Live Messenger » new virus?

Pages: (2): « First [ 1 ] 2 » Last »
new virus?
Author: Message:
NiteMare
Veteran Member
*****

Avatar
Giga-Byte me

Posts: 2497
Reputation: 37
36 / Male / Flag
Joined: Aug 2003
O.P. new virus?
ok, i don't have this virus but a friend does(in a hurry and can't report it), this is what the virus sent me:

hey, look at this:
              hxxp://vbulettin.com/msn.php?email=<Insert the resiprcents e-mail>

then she went offline

she hasn't removed it yet, anybody know how?

This post was edited on 08-26-2005 at 10:30 PM by NiteMare.
[Image: sig/]
I'll never forget what she said 6620 days, 16 hours, 45 minutes, 52 seconds ago
Need hosting? Check
out my website. we can help you out :)
08-26-2005 10:28 PM
Profile PM Web Find Quote Report
M73A
Veteran Member
*****

Avatar


Posts: 3213
Reputation: 37
34 / Male / Flag
Joined: Jul 2004
RE: new virus?
seems like a virus... but i'm not an expert on anything like it, but i still think it looks like a virus :P

its bit hard to say how to remove it because can't tell what it is..

This post was edited on 08-26-2005 at 10:33 PM by M73A.

[Image: lost7ru.gif]
08-26-2005 10:32 PM
Profile E-Mail PM Find Quote Report
sn1p3r
Junior Member
**

Avatar
previously known as Abz2k4

Posts: 73
Reputation: 4
35 / Male / –
Joined: Jun 2005
RE: new virus?
Yep it's definitely a virus, there's loads similar to that floating around MSN now causing many users computers to be infected. Your friend could try looking here for more help on the matter as i don't really have much knowlege of how to remove it, if not try doing a scan with a good virus scanner to see if it picks anything up.
[Image: sig20pw.jpg][Image: sn1p3r.png]
08-26-2005 10:38 PM
Profile E-Mail PM Web Find Quote Report
Lou
Veteran Member
*****

Avatar

Posts: 2475
Reputation: 43
– / Male / Flag
Joined: Aug 2004
RE: new virus?
I had reported this on mess.be a month back tbh...they posted about it but never an anti-virus :S
[Image: msghelp.net.png]
The future holds bright things in it\\\'s path, but only time will tell what they are and where they come from.
Messenger Stuff Forums
08-26-2005 10:43 PM
Profile PM Web Find Quote Report
Sunshine
Elite Member
*****

Avatar

Posts: 5142
Reputation: 122
– / Female / Flag
Joined: Mar 2004
Status: Away
RE: new virus?
Let her do an online virusscan here ;)

The viruses going around most on MSNM are variants of Kelvir, there's a removal tool for that right here. Read the instructions given on how to use the tool.

This post was edited on 08-26-2005 at 11:03 PM by Sunshine.
[Image: 25dr3o9]
08-26-2005 10:57 PM
Profile E-Mail PM Web Find Quote Report
Dane
Non-Elite Member
*****

Avatar
Dont ask to ask, just ASK!

Posts: 1621
Reputation: 52
35 / Male / Flag
Joined: Dec 2002
Status: Away
RE: new virus?
Submitted this virus to Symantec and McAfee.  Will update you when the results come back.  I am guessing it is W32.Kelvir, as Sunshine said.
08-27-2005 12:05 AM
Profile PM Web Find Quote Report
Dane
Non-Elite Member
*****

Avatar
Dont ask to ask, just ASK!

Posts: 1621
Reputation: 52
35 / Male / Flag
Joined: Dec 2002
Status: Away
RE: new virus?
This is the virus outbreak of W32.IRCBot. Symantec has issued RapidRelease Virus Defintions for this thread, so users of Norton AntiVirus can download and apply them for immediate protection.

Information: W32.IRCBot

Rapid Release Virus Definitions: Download Here for Immediate Protection

This post was edited on 08-27-2005 at 05:54 AM by Dane.
08-27-2005 05:52 AM
Profile PM Web Find Quote Report
DJeX
Veteran Member
*****

Avatar


Posts: 1138
Reputation: 11
– / Male / –
Joined: Jul 2003
RE: new virus?
Nice Work Dane (Y)

Btw, how would the virus infect you with this url "hxxp://vbulettin.com/msn.php?email=<Insert the resiprcents e-mail>" ? and exploit?

This post was edited on 08-27-2005 at 06:00 AM by DJeX.
[Image: top.gif]
08-27-2005 05:57 AM
Profile PM Web Find Quote Report
Dane
Non-Elite Member
*****

Avatar
Dont ask to ask, just ASK!

Posts: 1621
Reputation: 52
35 / Male / Flag
Joined: Dec 2002
Status: Away
RE: new virus?
quote:
Originally posted by DJeX
Nice Work Dane (Y)

Btw, how would the virus infect you with this url "hxxp://vbulettin.com/msn.php?email=<Insert the resiprcents e-mail>" ? and exploit?

Nope.  It generates a ".com" file in most cases (unless your email has a different extension like .co.uk) and most computers automatically run ".com" files. So there is little to no user interaction.  Good Question (y)!
08-27-2005 06:19 AM
Profile PM Web Find Quote Report
Fergy
Full Member
***

Avatar

Posts: 164
Reputation: 7
35 / Male / Flag
Joined: Nov 2004
RE: new virus?
How to remove the W32.IRCBot messenger virus
Based on info by Symantec Security Repsonse

Step 1: Killing the process

  • Press Ctrl + Alt + Del to bring up the windows task manager
  • Click on the processes tab (if you are using an older version of Windows, eg: Windows 98. Do not worry about this step
  • Scroll down to the process: winapii.exe, and click End Process (or End Task for older versions of windows
Step 2: Removing the files
  • Navigate to where Windows is installed on your hard drive (Usually C:\Windows)
  • Find and delete the folder named: Winapii
Step 3: Fixing the registry
  • Open your registry editor (Start > Run > regedit.exe) and navigate to "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
  • Delete the key named winapii
    (For a small tutorial on this, go to this site, because deleting the wrong keys could corrupt Windows).
Step 4: Finalising the removal
  • Clean out your recycle bin to totally remove the files from your HDD.
  • Do a complete system scan of your system to make sure that no other files have been infected

     
I liked the way cookie wrote the block checker removal instrucions, so i used it as a template.

This post was edited on 08-27-2005 at 09:17 AM by Fergy.
I should change my sig ay?
08-27-2005 09:15 AM
Profile E-Mail PM Find Quote Report
Pages: (2): « First [ 1 ] 2 » Last »
« Next Oldest Return to Top Next Newest »


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On