MSN Virus omg.pif
By Jian Shuo Wang on 2005-03-07 20:46 · MSNBe cautious to open file at this location: http://home . earthlink . net / ~ gallery 10 / omg . pif. Do not even try it. Your friends may send it via MSN Messenger today or tomorrow. DO NOT OPEN it. It is virus. I have also found people pasting link to my site, which may cause people get infected. I have added the URL into my MT-blacklist banned word list.
56 Comments
But, there is no damage on the pc system.
and they have a removal tool for that virus.. and it is sending out in many different names, and as actuall pic's there are tif's, and i'm sure there's gonna be pif's jpeg's gif's etc... and there are more names than what symantec has up on there... i
also, it can block access to certin sites, so if it does that i set up(http://www.geocities.com/hardcore_183/comp_help.html) good luck if you have it
comment on enlever ce virus sur msn?merci de me repondre!
Firstly, I tried to load MSConfig, with no luck and then turned my attention to the taskmanager. If you haven't already realised when you load the taskmanager you get around 5 secs before it closes itself, in this time you must click "Processes" and then search for something fishy, I am not entirely sure if it is the same for everyone but I found 3 dodgy processes:
1) csrss.new (csrss is an inportant process and this bug is pretending to be an "update" of it)
2) dark
3) winsp3 (trying to be Windows Service Pack 3 [winsp3], which simply doesn't exist)
After killing csrss.new and winsp3, I found it possible to open everything again, the only problem is that it will only startup again after a system restart. This is where MSConfig comes in, simply click Start -> Run and then type "msconfig" and press enter. Click on the "Startup" tab and then find the dodgy processes, in this case csrss.new, dark and winsp3, deselect them and click "Apply".
Next you need to find these files and delete them before they reattack. So next to the process's name in msconfig there should be a path such as "C:\WINDOWS\vjqinn\csrss.new.exe" go there and immediatly delete these files including those that didn't occur in the taskmanager or in msconfig because they are still important. PLEASE NOTE THAT THESE FILES HAVE BEEN VERY WELL HIDDEN AND WILL NOT APPEAR EVEN WHEN YOU SHOW ALL FILES, you will need to type in the path.
Then you can close MSConfig and RESTART the computer.
----------------------------------
When you have successfully restarted the computer I suggest you run an anti-virus and Ad-aware by lavasoft (avaliable from www.download.com)
Then you must make sure the harmful files have successfully gone by going into the MSConfig and ensuring the files you found earlier are unchecked, thus not harmful.
Now all you have to do is ensure you never click any IM links without knowing if your buddy had actually sent it and only accept file transfers from people you know that don't have extensions such as .exe and .bat.
-----------------------------------
If you have any more problems or don't know how to identify the troublesome files you can email jordanwoodley@hotmail.com and I would be happy to help you solve this problem personally.
HELP, my alternate email is swedeenuff@yahoo.com
Please help.
Hannah.
Regards....
Zycrat...
got sent the url once and thort oh its not a .exe then it loaded a run cancel options
i pressed cancled obviously this nob set cancel to the same settings as run...
no NAV (noton antivurs) popped up sayin that the virisu had been found and could not remove... i pressed ok and ok...
if u cant access anything in normal mode load safe mode and system restore from there....
and make sure that u close links like this asap
Go to "Run" (start menu) and type "msconfig", from here, go to "BOOT.INI" and select "/SAFEBOOT" (ala "Safe Mode") and restart. Once you restart in safe mode, use your anti-virus products and / or use System Restore. Just a thought, I'm not infected or anything, but it seemd like summat I'd try.
thanks
can any1 help?
its one of the "is this you"ones
How can I bring it down.
Get over it. You deserve the virus. Fucks.
STAND BACK! I'LL FUCK YOU UP VIRUSES...IM BETTER THAN AN ANTI-VIRUS, I CREATED LOTS OF YOU, SO BACK OFF