Computing.Net > Forums > Security and Virus > virus problems

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

virus problems

Reply to Message Icon

Original Message
Name: Gary Krugman
Date: January 11, 2003 at 15:42:05 Pacific
Subject: virus problems
OS: me
CPU/Ram: 128
Comment:

virus called JS no close anyone heard of this and how do you get rid of this


Report Offensive Message For Removal


Response Number 1
Name: cesar
Date: January 11, 2003 at 21:25:10 Pacific
Reply: (edit)

this is a type of joke virus is really not harmfull just dissable your system restore and then reanable it and you should be ok.!


Report Offensive Follow Up For Removal

Response Number 2
Name: www
Date: January 11, 2003 at 22:16:53 Pacific
Reply: (edit)

technical description
While JS.Trojan.Noclose may be annoying, it is not malicious.

The script has been around for years and is code used by a website to create hidden windows for
the purpose of displaying advertisements and banner ads.

Closing these windows can be difficult, because when you close one, the windows that is "hidden"
behind it is displayed.

The script can be used to create "infinite" pop-ups and is therefore regarded as malicious code
by BullGuard.

There is no malicious payload involved in this type of code and as such your system is not
endangered. BullGuard just blocks the script, thereby disallowing the hidden "annoying" window to
be displayed, when the first one is closed.

Note: Other security companies, like Symantec (Norton), have chosen not to regard
JS.Trojan.Noclose as malicious code and do not block it or inform of its presence. This is a matter
of some discussion in virus-forums. BullGuard has chosen to block it, since it may be used for
unethical marketing purposes.

Removal
The script is only executed once and has no payload, so there is nothing to remove. Just close
any pop-up windows from your browser.


Report Offensive Follow Up For Removal

Response Number 3
Name: AcuraGuy
Date: January 12, 2003 at 01:12:19 Pacific
Reply: (edit)

Ive used a virus scanner and it found like 60 infected files. The program i used could not disinfect the virus because it was more dangerous than normal. Is there a program that I can buy, or even download that disinfects Viruses that are more dangerous.
Im using Windoes ME. What the virus is doing to my computer is it creates a .vxd file next to every .exe file, and its either the same size, or smaller. If i delete the .vxd file, the program stops working. Some program icons change to the normal basic icon, so i cant tell what im clicking on. Do you know what kind of virus would cause this, and if so how do i get rid of it. If you know about this problem and can help, E-mail me at IntegraGsrBalla@aol.com ..thanx alot t whoever helps me..if i even get any help..lol


Report Offensive Follow Up For Removal

Response Number 4
Name: cesar
Date: January 12, 2003 at 10:42:54 Pacific
Reply: (edit)

you should respost your question again on anew treat,!


Report Offensive Follow Up For Removal

Response Number 5
Name: Tom41
Date: January 12, 2003 at 13:59:16 Pacific
Reply: (edit)

AcuraGuy, It sounds like you are infected with W32.Stator. Don't delete the .vxd's, They are your valid .exe's that have been renamed to a .vxd extension by the virus.

See This:

http://www.symantec.ca/avcenter/venc/data/w32.stator@mm.html


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software