The "New Online Threat" - BEWARE!!

[emily]

Hmm.

My computer has been crashing. But since like, last year. (though I think it's because I have so much **** on this computer, and it's ooold.)

Though I probably have like, 3 viruses on here without realizing it already.

[peacegc]

Hmmm, I wonder If this is the virus my computer had,First my internet stopped working for no reason at all then later that night my computer shut down by itself and never turned back on o.O, I could never get it to turn on for more than like one second so I ended up having to buy a new computer, I hope to god that my new computer doesn't get the virus so I'm definetly downloading that virus scanner, but is their any way to get the virus off of my old computer? I would like to get some of my important files off of there, otherwise they are lost forever =(

[Kahlah - The Twilight Wolf]

Sure there is ^_^ Take the hard drive out of the old computer and set it up in the new computer as a secondary (better known as slave) drive. It shouldn't be that hard to set the hard drive up as a slave. if you need help on how just ask around.. either here on the forums or at home.

[peacegc]

Okay I'll try that. I'll probrably have to get my dad to help put it together, Thanks for your help =) will It effect my new hard drive in anyway?

[Kahlah - The Twilight Wolf]

If you find out it's on the old Hard drive then the new one should be fine unless it 'caught' the virus while you were already using the comp from the point the day you got it until now. You'll know if the program tells you it's in a running System Process on the new hard drive ;

That means it latched on to you from someone, or something...somewhere thus has nothing to do with your old hard drive

[lissa]

Wow. I'm pretty sure I have this now. =/ Does it like.. destroy the computer completely? Because my computer has been acting wierd for days.

Like, all of a sudden, I can't use my Opera browser anymore because it would take hours for something to load. And even now on my default explored (Internet Explorer), my typing is delayed. Like, when I typed 'delayed', each letter came up a littler long after typing it that it should have. And P5 is begining to act up. Just.. everything is slowing down.

And when my Dad came over to my mom's house and looked at the computer, he said: "Why is McAfee disabled? Did you shut it down?" I was like: "...No..??" And it disabled EVERY single one of my virus scanners. I didn't even read the whole post, but once I started reading and scanning through, I knew this had to be my virus.

I'm gonna go back and read through, then call my Dad tomorrow (maybe) to see if he wants to come over and check it out. UGH. Who spends so much time making a program to crash random people's computers? Jeez.

[lissa]

kahlah said:

To run your computer in safe mode shut down the comp and turn it back on. While it's booting >_> Just keep hitting the f8 key, you should get the option to run your comp in safe mode. if you see "Which operating system would you like to run: Microsoft Windows XP Home/Professional (..etc..)" just hit the F8 key again and it'll go back to the options (That just means you hit the f8 key so that it selected an option for ya by accident lol). Also yes ; Freezes does count.

Really sorry to double post. But whenever I tried to reboot in safe mode, it ALWAYS said; Would you like to run: Microsoft Windows XP/Home Professional. Every Safe Mode kind (mine had 3) had that option, and no others. =/ Help, please?

[Kahlah - The Twilight Wolf]

Which one do you use

Windows XP Home or Pro?
Whichever one you use just choose that one and go from there ^_^ It always asks which Operating system do you want to use after you choose


Safe Mode
Safe Mode with networking
Safe mode with Command Prompt

Run Windows Normally
Run from last safe state

etc...


O.o Remember the one you want is the one that says Safe Mode, That way your comp isn't running the net allowing more Intrusions from your "Unwanted Pests"



[EDIT]
Just for public awareness..... I REALLY hate to say this BUT This virus does sadly infect your Petz.exe files AND your Sims.exe files, This comes from one who HAD this terror >_>; Me.... Upon the scan's completion at 12:37pm yesterday afternoon I had 453 infected files, Reports from friends are still flooding in >_o one who in which had over a gig of infected files...This thing LOOOOVES Exeacutables as most files being reported as infected are exes.


...okay love isn't the right word, It bloody stalks them!

[lissa]

Well, when I selected the only option there was, it ran through like this black screen with all these file names, then stopped. After about fifteen minutes, still nothing happend. It just stayed on this black screen with file names on it. =/

[Tina]

The F-8 thing didn't work but I looked it up and found out how to make it work for me.

I open it up in safe mode, none of the for scanning buttons are clickable

So yeah I guess I'll scan it not in safemode tonight, maybe it'll find a virus or more maybe it will freeze by morning.
And maybe the virus will have multiplyed by the time I wake up X_<

I hope it works

[Kishi]

You happen to know if it affects "Avast!"? That's the virus scanner I use.

Just curious. I'll prolly run this stuff later.

[mystik]

How does it get on your comp?

[Bubblewrap! :D]

Eh... *Screams*

My dad is all into 'not downloading' stuff. Will everyone get it? *Freaks out* Will my petz be okay? And does it destroy your computer? What kind of people in their right mind would make this virus?

[Kahlah - The Twilight Wolf]

Only the sick and twisted minded type who seem to have no objective make such things, yet as I told cheetah over Ims last night...it would be funny to see these virus creators catch their own little 'creations'. You can 'catch' this evil thing through an infected file ; some have gotten it from an email attachment. Attachments as we all know are nothing but files.


BUT... I do have this to share with all of you:




Win32.polipos.a


This is Trend Micro's detection of a polymorphic and memory-resident file infector propagating via popular Gnutella-compatible peer-to-peer (P2P) networks, such as BearShare and Gnucleus 2.0.0.6. (It has also been reported to have spread far beyond those two P2Ps and into home comps, business comps and more since this)

It infects .EXE and .SCR files found in the Program Files and Windows system folders, including their subfolders. The said action corrupts legitimate system files, which may compromises normal operation of the infected machine.

It also infects the said target files found in folders typically shared by the said P2P applications or persons.

Moreover, it terminates certain security-related processes if found running on the infected system. The said routine makes malware detection difficult."

and further:

"This file infector terminates the processes that contain any of the following strings:

* a2
* adaptec
* agnitum
* ahead
* aladdin
* alarm
* alwil
* anti
* armor
* aspack
* assemble
* astonsoft
* avast
* avg
* avp
* avwin
* avx
* aware
* backdoor
* barracuda
* blackice
* blindwrite
* burn
* cillin
* clean
* clonecd
* common
* copystar
* debug
* defender
* disasm
* doctor
* drweb
* eeye
* elaborate
* eliashim
* esafe
* eset
* etrust
* firewall
* forti
* f-prot
* frisk
* gear software
* gladiator
* grisoft
* guard
* hack
* heal
* hijack
* hunter
* ida
* imapi
* infosystems
* inoculate
* intermute
* iss
* kaspersky
* kerio
* lavasoft
* mcafee
* mirc
* neolite
* nero
* newtech
* nod32
* norman
* norton
* numega
* olly
* ort expl
* ositis
* outpost
* panda
* pebundle
* pecompact
* personal
* pklite
* pkware
* principal
* process
* protect
* proxy
* qualys
* rescue
* retina
* root
* route
* roxio
* safe'n'sec
* sateira
* scan
* secure
* security
* shield
* slysoft
* softice
* softwin
* sonique
* sophos
* spf
* spider
* spy
* spy
* spyware
* starforce
* steganos
* swift sound
* sygate
* symantec
* tds3
* tenable
* tiny
* tmp
* trend micro
* trojan
* upx
* viri
* virus
* webroot
* zone labs

The said strings are usually found in security-related processes.

Other Details:

The following string can be found in this file infector's virus codes:

Win32.Polipos v1.2 by Joseph




Side notice: Also personally being one who has HAD this "Bad JuJu" it also infects ... winlogon.exe AND Regedit! Meaning it screws up your windows registry big time! That's why they say run the scan in safe mode so that if it is in your registry it'll be cleaned as well. This also means since this report was made, as you all know it does get into your running system processes and ... It does infect more than just EXE and SCP files -_-; We've (All in which I've talked to who've had or are in the process of getting rid of the virus as well as a few others from around the world Yay for fourms, good for info) all found that out as of late but it does go after any exe files it can latch its dirty viri legs on.

Going to find a friend who has Freedom and see if that is also affected. As you can see we're finding more and more file names being infected daily. As I said, I've had it and it DID infect my Sims 2 stuff and my Petz stuff All which have been cured/debugged of this havok causing plague

[INDIGO]

Thank you....

Meep...I don't think I have it. But who really knows. My scanner keeps on shutting down half way through...X?