Nasty bug

[Guest]

I received a virus on msn with omg this sis funny and the link
http://jose.rivera4.home.att.net/cute.pif
It sent itself to all my contacts and has deleted my d:/drive. Apparently it
embeds itself in your pc too. I really havent got a clue how to get rid of
it, and im dreading what its going to do next! Help!

 

[kurttrail]

I received a virus on msn with omg this sis funny and the link
http://jose.rivera4.home.att.net/cute.pif
It sent itself to all my contacts and has deleted my d:/drive.
Apparently it embeds itself in your pc too. I really havent got a
clue how to get rid of it, and im dreading what its going to do next!
Help!

Thanks for sharing with us the link to the virus! Luckily AT&T is
blocking the site.

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.com/mscommunity
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei"

 

[David H. Lipman]

From: "Jinxed" <[email protected]>

| I received a virus on msn with omg this sis funny and the link
| http://jose.rivera4.home.att.net/cute.pif
| It sent itself to all my contacts and has deleted my d:/drive. Apparently it
| embeds itself in your pc too. I really havent got a clue how to get rid of
| it, and im dreading what its going to do next! Help!


There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

This is the "W32/Kelvir.worm" and is a hot NEW infector !

If you send me email (just remove ~nospam~) I can provide you with instructions and a
specific tool to the remove the infection.
The software is licensed so I can't post the information publicly.

 

[MGGP]

If you feel unable to resolve this problem yourself, take
it to a professional. This type of problem can be fixed.

 

[David H. Lipman]

From: "Jinxed" <[email protected]>

| I received a virus on msn with omg this sis funny and the link
| http://jose.rivera4.home.att.net/cute.pif
| It sent itself to all my contacts and has deleted my d:/drive. Apparently it
| embeds itself in your pc too. I really havent got a clue how to get rid of
| it, and im dreading what its going to do next! Help!


UPDATE:

Trend Pattern File 476 just released now removes this infector...


1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt476.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM .

2) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode then shutdown as many applications as possible.
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) Create a new Restore point

* * Please report back your results * *

 

[Albert Sims]

I received a virus on msn with omg this sis funny and the link
http://jose.rivera4.home.att.net/cute.pif
It sent itself to all my contacts and has deleted my d:/drive.
Apparently it
embeds itself in your pc too. I really havent got a clue how to get rid
of
it, and im dreading what its going to do next! Help!

This will be a lesson... NEVER open random links... heck, I even virus
scan jpeg attachments my relatives send before I open them! You never know
what you are getting! Luckily, Norton Anti-Virus has never let me down in
the six years I've used it (just renewed my virus definition subscription
two months ago for another year).

 

[Guest]

Have you looked on PCHELL.COM they have nearly every virus patch and removal
there for free.