Occlumancy says:
hxxp://You-Looked-Crazy.com/?naughty=occlumancy <= hahah check it out what we would be doing secretly
brb plz
What is this Virus? is it some kind of trojon Bot?
i mean God… I know its an scripted virus of something… Just I dont click it… But how to I help these people. my God all my friends are starting to get it and 70% of my contacts are infected… I knwo im not… because no one ahs gotten any odd msgs from me… and I always link my Avast to work with WLM… just incase…
so im sorry I didnt know were to post this. i post a small question in my orther post below this one about the strange WIN32 vitro issue ive had bout were to post this quetin…
admins mods forgive me if this is not the spot… if it is then im right on the money…
But. i just need some answers… what kind of threat am I dealing with her and my friends on my messenger?.
is it all one type virus? or something or is it multile versions? ive heard of MSN virus remover programs and downloaded one to try it but as soon as i clicked on the exe… to scan just in case
sure enough VIRUS was found and I delete the creeper… =(… what do i do?
It’s a malicious link from a spambot. Please disable the link by replacing http with hxxp.
If you use MSN Messenger, you must set your Instant message provider sensitivity on High.
Spambots will distribute viruses, worms, trojans, and other malware through malicious links that they post on instant messengers (including AOL IM, Yahoo! IM, and MSN Messenger).
As for Win32:Vitro, disinfecting the virus is no good without formatting and reinstalling.
oh im sorry about the link Bops head in self what was i thinking … thanks for changing int for me e.e.
Um yeah but spambots… hmm how do people get them.?
is it a bot on a addy? or something or is it a bot inside an infected computer that is scripted? Like the malware etc. does it make these bots?
or does it mean someone has someone added that is actualy added a bot and they dont know it?
Im just curious. and thanks I disabled the links so I dont get those anymore.
And yes I formated the hard drive completely. I was able to save whatever data I could. and just forgot about the .Exes. I’ve had other backups so i’m not worried… the virus was in fact nuked…
So Win 32 is no longer an issue.
But as far for the msgs… being a spambot… how do I help my friends stop them? is there programs they can use to get rid of these bots they have? because i get them from my friends.
Would they just have to clear all the cache MSN live makes and uninstall msg then re-install?
how do I help my friends stop them? is there programs they can use to get rid of these bots they have?
jepp download and scan with Malwarebyte Antimalware http://malwarebytes.org/ and click the button "remove selected" after the scan to move all bugs to quarantine
Well I must have this on my computer because my son said i had sent him a link that his brother had sent earlier in the day from the same laptop - I knew something must be wrong because it all flashed and then froze i couldnt do anything on windows live. So i immediately turned msn off before i infected all those on line and did some scans.
I ran adaware and it only found some cookies - I then ran avast- i didnt get past the memory test as it said it was infected - so i did a boot scan and removed JS:Pdfka-mv to chest. I ran an avast scan and after a while again it said the memory was infected and so the process started again - It detected 2 win32 trojans. Again i have moved to chest and emptied all temp files etc. i have also updated all software etc with Secunia. Another scan was clear. I have used msn tonight and not had the problem again.
My son said he had clicked on a link that a friend had sent as he quite often sends things and it was an image shack link so he thought it was safe - obviously not. If my contacts have tried to open the link i sent even if it wouldnt open will they be infected?
Could you please check my hijack log please to see if I can do anything else?
Logfile of HijackThis v1.99.1
Scan saved at 21:43:01, on 04/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
You have used an old version (1.99.1) of HJT which may show false and/or incomplete information.
Please provide a new HJT log by downloading version 2.0.2 of HJT from the link below. Do not download HJT to the desktop but instead download it into it’s own folder on the hard drive.
It would also be better to start your own topic instead of posting in this one. You can start a new topic by clicking on the NEW TOPIC button near the top right of the index page for this section of the forum.
secretly 
