2 Virus Questions

nike_guy_man's picture

They have: 840 posts

Joined: Sep 2000

2 questions:
1. Can you recommend an online or free downloadable virus scanner? A long-distance family member of mine has a Klez virus and the virus scanner is just telling her she has it, but won't delete it.

2. A friend of mine has that AOL Instant Messenger virus that sends a message to a person with a link, and when they click that link, it infects their computer and sends it to other people. The only remedies I've read are to delete explorer.exe in safe mode and mess with the registry and other system INI files. Google searches take me nowhere, as the AIM part of the query is taking everything to just AIM pages... even with quotes I pull up nothing Sad

Suggestions?

Laughing out loud

hagar's picture

They have: 104 posts

Joined: Oct 2002

http://housecall.trendmicro.com isnt too bad, but its an online checker, not downloadable apart from a plugin. Atleast you know you have the latest updates when you use it;-)

other then that, I can recommend the symantec free klez removal tool, which will sort out klez in short order. http;//www.symantec.com

"I ’ll make thee glorious by my pen, And famous by my sword." - James Graham, Marquess of Montrose (1612–1650)

mjames's picture

They have: 2,064 posts

Joined: Dec 1999

Quote: Originally posted by nike_guy_man
2. A friend of mine has that AOL Instant Messenger virus that sends a message to a person with a link, and when they click that link, it infects their computer and sends it to other people. The only remedies I've read are to delete explorer.exe in safe mode and mess with the registry and other system INI files. Google searches take me nowhere, as the AIM part of the query is taking everything to just AIM pages... even with quotes I pull up nothing Sad

That shouldn't happen ... it is undoubtebly caused by your friend running an out-of-date version of AIM and/or failing to run Windows Update. Make sure your friend's system is updated with all the patches first and foremost.

nike_guy_man's picture

They have: 840 posts

Joined: Sep 2000

This is a very widespread virus on AIM
I know at least 10 people with it... its a real pain
All these people have Windows Update and antivirus programs up to the second...
Any other thought?

Laughing out loud

Busy's picture

He has: 6,151 posts

Joined: May 2001

I know someone that works for AOL support desk, I'll see if I can get any info from her about it

jammin's picture

They have: 222 posts

Joined: Sep 2002

what is the virus name?
i have seen a couple viruses almost exaclty like that.
they generally are kindof a pain to get rid of, but the ones that i have seen also dont behave like a normal virus, they dont infect any files, they just have a program that replicates itself over IM programs.

anyone can do any amount of work provided it isnt the work they are supposed to be doing.

nike_guy_man's picture

They have: 840 posts

Joined: Sep 2000

I don't know the name of it, no virus scanners pick it up and I can't find info about it
It's not a bad virus, its just annoying to send someone a link every time you send a message... if they click that link then they get it and send it on to more people

Let me know what turns up Busy... thanks

Laughing out loud

Busy's picture

He has: 6,151 posts

Joined: May 2001

Sorry for the delay, forget she has your Sunday and Monday off.
Anyhow she wasn't much help, said there are lots of AIM viruses (scary) out there and they direct people to macfee or symantec (nortons) for removal.
The news virus system have a setting to scan MSN AIM etc like email and downloads.

Sorry couldn't be of any help

jammin's picture

They have: 222 posts

Joined: Sep 2002

so does the virus actualy send a link to a webpage? or does it send the file itself?

nike_guy_man's picture

They have: 840 posts

Joined: Sep 2000

It sends a link... you click the link and you get the file and everytime you sign on it messages everyone in your list and tells them to click this link and the cycle continues

Laughing out loud

hagar's picture

They have: 104 posts

Joined: Oct 2002

this may be nasty, but check this white paper out for a virus concept
http://blanu.net/curious_yellow.html

totally cool:D

Abhishek Reddy's picture

He has: 3,348 posts

Joined: Jul 2001

I had a virus like that on MSN Messenger once. All I did was re-install Messenger and delete all known instances of the virulent file. Worked just fine. Wink

Don't know if it works for other IM apps, though.

jammin's picture

They have: 222 posts

Joined: Sep 2002

well if it is a link that it sends, then write down the adress, and report to the host that they are spreading viruses.

nike_guy_man's picture

They have: 840 posts

Joined: Sep 2000

The virus opens up port 80 and places a file on YOUR computer using YOUR IP, so when people click it, they are going to YOUR computer, not a remote host

Laughing out loud

Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.