Computing.Net > Forums > Security and Virus > Aim viruses-

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Aim viruses-

Reply to Message Icon

Name: jeenyus89
Date: December 4, 2005 at 22:24:07 Pacific
OS: Windows XP
CPU/Ram: AMD athlon xp 2200
Comment:

Hey everyone im trying to help my roomate out with his computer- ive already ran hjt and removed a bunch of malicious things turned off sys restore ran many removers etc.. but they keep coming back...

Any help would be appreciated..



Sponsored Link
Ads by Google

Response Number 1
Name: Zenith
Date: December 5, 2005 at 08:05:31 Pacific
Reply:

First off, this is very little information to help you with this issue.

What keeps coming back (name maybe).


Internet search engines are your friends.

Morpheus: There is a difference between knowing the path and walking the path. "The Matrix"


0

Response Number 2
Name: jeenyus89
Date: December 5, 2005 at 16:24:40 Pacific
Reply:

The aim virus that sends everyone on ur list that virus. I believe its the myspace.php file or something along those lines- i have tried all the aim fixs that are offered from jloden and several others but no luck.


0

Response Number 3
Name: larsonc
Date: December 7, 2005 at 14:33:43 Pacific
Reply:

This is probably the IM.Myspace04.AIM virus. It was releases only a couple days ago, and it sends out a link to the people on your buddy list containing the path to an image which has embedded executable malicious code that will install the same bot on your system. The person sending the link does not know that they are doing it. Plus, if you respond, the virus has some Aritificial Intelligence built in and it will talk to you. Quite clever if you ask me. However, the average user couldn't figure out half of the things I've just said. Oh, and BTW, there isn't a fix yet.


0

Response Number 4
Name: John Wofford (by johnny025)
Date: December 22, 2005 at 15:07:01 Pacific
Reply:

There will be a file called dr.exe or drme.exe in the root of the drive where your operating system is loaded. Mine is on the C:\ Drive so it was located in root of C:\.

1. Delete C:\dr.exe or C:\drme.exe file.

2. Show all hidden files and folders in the Folder Options from the Tools menu in explorer.

3. Stop the SCVHOST.exe service in Task Manager. NOTE: Do not confuse this with SVCHOST.exe or it will cause your system to shutdown if you terminate the task.

4. Delete the file C:\Windows\scvhost.exe

5. Clear your temporary internet files from IE and all the offline content.

6. Delete the dr.exe from the C:\Windows\Prefetch (if it resides there)



0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Aim viruses-

AIM virus and spyware www.computing.net/answers/security/aim-virus-and-spyware/16783.html

AIM Virus... www.computing.net/answers/security/aim-virus/10735.html

New AIM Virus www.computing.net/answers/security/new-aim-virus/12845.html