just been a witness of virus. BEWARE!

Entertainment Media
1

many many MANYYYYYYYY thanks to our beloved ammarr miyan for fixing up…

here is what happend approx one hour ago:

http://www.gupistan.com/gallery/4/yasir-hacked.jpg

Problems:

now if u notice closely, STALWART is NOT typing a message, but “PRESIDENT OF UNITED STATES” (yeah rite) is FLOODING the screen with winkies..
problem arises with a file called CHOKE.exe, (those of u who can’t see the extentions in their explorers, it would appear HOPEFULLY as choke ONLY)

Solution:

#1. START > RUN > type in “sysedit” and press enter.

  • use the file WIN.ini, and browse until u see a line called
    ‘load=’ and ‘run=’.
  • remove ANYTHING after the = sign in both lines.
  • now select the SYSTEM.ini file, and browse until u see a line called
    ‘shell=explorer.exe’.. IF its like that, good, if not, MAKE it like that.
  • save all the changes, quit the SYSEDIT utility..

#2. START > RUN > type in “msconfig” and press enter.

  • select STARTUP tab, and UNSELECT anything related with SOME exe that u cannot understand/remember the description for…
  • press APPLY and it MAY ask you for rebooting etc. press whatever (OK/YES) to reboot.

#3. Now the ACTUAL trojan is STILL sitting on your system. Here are the three places it would be residing:

  • MSN RECEIVED FILES’ folder (USUALLY) located in c:\program files\msn messanger service\blah blah
  • ROOT of C: drive (**C:**) that is.. AND
  • ROOT of windows (if its windows 95a,95b, nashville, 98ver1, 98se=second edition), it would be sitting under c:\windows (DEPENDING upon where u installed windows in)

so DELETE all file and its ghosts from all these locations, go to Recycle bin, and EMPTY Recycle Bin.
(alternative way of DIRECT DELETION is not discussed here as its personal experience that people LIKE to use the direct deletion, yet SOMETIMES it becomes a MAJOR pain)..

side note: at THIS time, i am currently not aware that the ip address that was connected to my machine was the ACTUAL hacker’s, or its an automatic script OR it can open backdoors VIA msn..

(opening backdoors in someone’s machine VIA msn would be the scariest, yet least possible scenario)…

any other info/comments/suggestions would be highly appreciated as msn for ME atleast is the biggest communication tool.

Credit: is given whenever its due.. this solution was ammarr’s courtesy.. thanks a lot man for a real-time response.. :slight_smile:

teri dunya meri dunya main hay itni doori,
tera aanchal meray haathon main nahin aa sakta,
waqt ki dhoop khari hay sarr pe,
main teray zulf ka saya bhee nahin pa sakta…

2

Whats the size of the file.....and MSN messeging runs through a server so you cant get an IP UNLESS you transfer a file of something...(not sayin that its not possible)

3

confuse bhai thanks sooooooooooo much

http://www3.pak.org/gupshup/smilies/smile.gif

http://www3.pak.org/gupshup/smilies/smile.gif

4

[quote]
Originally posted by who---me:
not sayin that its not possible
[/quote]

EXACTLY.. funny thing is, that i STAYED online, while yasir rebooted his pc, and fixed by using those 3-4 steps, now WHEN he came back online, that ip never showed up in my connected list of the machines who were on my machine .. ;-) .. so u know, COULD BE a co incidence.. messanger.ca blah blah was connected at 1038 port, THIS user/machine was connected at 1039 AND 1037 .. kinda YOU KNOW, made me a bit jumpy about it.. =)

teri dunya meri dunya main hay itni doori,
tera aanchal meray haathon main nahin aa sakta,
waqt ki dhoop khari hay sarr pe,
main teray zulf ka saya bhee nahin pa sakta...

5

Tou kiss nay kaha haiN kay har waqat MSN par baithay raho?

6

lol ahmedjee

7

THANDAY rahain

http://www3.pak.org/gupshup/smilies/hehe.gif

.. warna hazratt khizir ko quote ker doonga ke khuwab main aa ke unhoon nay kaha ke faizy UTH aur msn parr jaa, jaa kar yasir ke computer main KEERAY (virus) ko dekh aur screenshot lay ker img main daal .. abb batain ? main kiya karta.. karna para :))

teri dunya meri dunya main hay itni doori,
tera aanchal meray haathon main nahin aa sakta,
waqt ki dhoop khari hay sarr pe,
main teray zulf ka saya bhee nahin pa sakta…

8

**Motoo: **Jub bhee boloo gay, BongI hi maroo gay! :~P

9

There's someone on my messenger list with the nick: [email protected]
Should I be suspicious?