1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

virus? worm?

Discussion in 'Security and Privacy' started by JAK, 2003/12/05.

Thread Status:
Not open for further replies.
  1. 2003/12/05
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    V.I.R.U.S (worm?)
    I am pretty sure i have a worm, i am able to find a few worms similar to this but not quite as bad. Preety sure it originated from kazaa, i am running win me. I am unable to open msconfig or regedit. "Operation has been cancled do to restrictions on comp. Please contact sys admin." If i open any web site containing the word v.i.r.u.s. in its address (and other words too like mcafee/norton/symantrec...anything that would help) or even try searching for those words IE or netscape close. I have symantec but it wont run. I cant even open folders on the comp with those words in them either. I cant do an online v.i.r.u.s. scan because they all have the words in their address except stop-sign.com which did not even detect anything.

    Please Help


    more info
    also creates these files in the c:\ folder

    Counter-Strike Condition Zero Keygen.exe
    Deus Ex Invisible War NO CD Crack.exe
    Doom 3 NO CD Crack.exe
    Half-Life 2 Keygen.exe
    Half-Life 2 NO CD Crack.exe
    Hidden & Dangerous 2 NO CD Crack.exe
    Jedi Academy NO CD Crack.exe
    Max Payne 2 NO CD Crack.exe

    all 65.5kb

    if i delete these and reboot, they come back
     
    JAK,
    #1
  2. 2003/12/05
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    Go get HijackThis, it has the ability to show everything starting up, and can disable them. Post the log here.
     

  3. to hide this advert.

  4. 2003/12/05
    Johanna

    Johanna Inactive Alumni

    Joined:
    2003/03/08
    Messages:
    2,402
    Likes Received:
    2
    This link http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.kamesh.html

    may be useful. Why does anyone use Kazaa, anyway? Lately there have been a rash of nasties spreading over that network, and it's more than spyware, now. If these script kiddies would put their skills to constructive use, people would pay them instead of hate them. Let us know how it's going.

    Johanna
     
    Last edited: 2003/12/05
  5. 2003/12/06
    JAK

    JAK Well-Known Member Thread Starter

    Joined:
    2002/01/19
    Messages:
    366
    Likes Received:
    0
    issue resolved

    ran reg checker and rebooted and was able to run virus scanner to clean it out
     
    JAK,
    #4
  6. 2003/12/06
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    Thanks for posting back and letting us know how you got it resolved.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.