Oddworld Forums - Virus Alert!!!

Oddworld Forums (http://www.oddworldforums.net/index.php)

- Off-Topic Discussion (http://www.oddworldforums.net/forumdisplay.php?f=9)

- - Virus Alert!!! (http://www.oddworldforums.net/showthread.php?t=5074)

Spice Girls?! I hate them. . . So I wouldn't go sending e-mails around telling peeps about them.
Anyway, I will not touch my e-mail until I get a virus checker of some sort. I will post on here when I get one. If you get an e-mail from me before I say that I have a virus checker, then the e-mail probably is a virus.
(Hope you all get what I'm saying here. . .)
- DH

(OOC: Sorry for the double post. The Forums is being a pain again, so I couldn't scroll down and edit my post)

I have just found the log file left over from when the Anti-Virus program from Norton.com scanned my computer.

Deleted the value "Winkon" from the registry key
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run"

The file "c:\WINDOWS\SYSTEM\Winkon.exe" is infected by W32.Klez.gen@mm. The tool could neither repair nor delete this file.

The file "c:\WINDOWS\TEMP\Nih1321.exe" is infected by W32.Klez.gen@mm. The file is deleted since it is unrepairable.

The file "c:\WINDOWS\TEMP\Moo9044.exe" is infected by W32.Klez.gen@mm. The file is deleted since it is unrepairable.

The file "c:\WINDOWS\TEMP\Iec9032.exe" is infected by W32.Klez.gen@mm. The file is deleted since it is unrepairable.

The file "c:\Program Files\Plus!\THEMES.EXE" is infected by W32.Klez.gen@mm. The file is repaired.

The file "c:\Program Files\Abe's Exoddus\Exoddus.exe" is infected by W32.Klez.gen@mm. The file is repaired.

The file "c:\Program Files\Mjuice Media Player\MJAgent.exe" is infected by W32.Klez.gen@mm. The file is repaired.

The file "c:\Program Files\Abe's Oddysee\AbeWin.exe" is infected by W32.Klez.gen@mm. The file is repaired.

The W32.Klez.gen@mm/W32.ElKern.gen
infection removal was unsuccessful.
The tool could not delete 1 viral file(s) from your PC.
Please boot into Safe mode and run this tool again.
Files that could not be repaired or deleted by this tool must be removed
manually. Check the log file for a list of files that could not be deleted.
If you need more information to assist you in performing any of the above tasks,
you may search our Knowledge Base at
http://www.symantec.com/search/

Here is the report:

The total number of the scanned files: 44888
The number of deleted files: 3
The number of repaired files: 4
The number of viral processes terminated: 0
The number of viral services deleted: 0
The number of registry entries fixed: 1

I booted back up into Safe Mode later and removed to remaing file, just this log didn't record that. However, the funny thing was this:

The virus infected both my Oddworld games!!!

Is that suspicious or what??
- DH

Well, I think someone on MSN said I sent a blank email, and they weren't on my address list. And its spreading through the forums or something, and my "funny" game turned out to not really do anything to my computer. Virus scan showed nothing, Real Time Virus thing didn't pop up ever, no newly installed files were found, and nothing ran in background etc... My dad (who is more or less a computer expert) said most viruses tend to be aimed at Outlook Express, so it may not be able to do anything through MSN. If it did anything, it was to MSN and not my computer, and its already done. Tha may also be the case with your "humor" game, Dyl.

Originally posted by Teal
I keep getting the silly thing under a variety of addresses. And I don't think it's using things like people's buddy lists in IM (ugh, "buddy" - hate the word *shudders*) as I've had the virus from people I don't even know, but found their email addresses on the forums...

(And Alcar, I already said to you that I never meant I thought it was coming direct from the forum server, I just said I thought someone had accessed the forums email list somehow, as the only connection I could see was that they were all OF email addies I was getting the virii from. (actually, I haven't had the virus, just lots of empty mails. Maybe the Uni firewall is stopping it getting through, although I didn't think it worked for hotmail... never mind.) So there, you evil rumour-spreader, you! Trying to make people think I'm stupid, whatever next... ;))

I wasn't implying you were stupid at all!

I merly said you were stupi....i mean stupendous! ;)

Just kidding.

Dark Hood, as for the virus deleting your Oddworld games...well...thats just extremely odd, maybe this person doesn't like Oddworld very much, is there anyway you can see the senders IP?

Alcar...

Dag nabbit! I got it. Though i deleted it...

The virus never deleted my Abe games, since the program I used to remove it fixed both of them.
I don't think there's any way of getting the sneders IP address.
- DH

I've got a Virus that sends itself out in a blank email. So i need to know how to get rid of it...someone...HELP!!

I've recieved a message subjected "Spice girls vocal concert" from a CronoFiend. I don't know, someone from here? If so your virus is still spreading. I don't know the real email address, I'm not opening it...

Well, I don't THINK it's M$N, as I've had emails from people I've never even heard of, and people I've never heard of have had emails from ME, so... Oh well, let's just agree to disagree on where the hell it's coming from, and just concentrate on the business in hand... (deleting random emails without opening them... ;) )

I just came up with a EVIL plan, he he he. Next time you get that email, dont delete it, but dont open it either. Then, next time you go to you school... erhm, never mind. Bad idia.

Xino's it only effects the Hotmail server and your email address. It doesn't seem to be harmful...just incredibly annoying!!

Ahem, I had a bad feeling at the first time I saw the subject of this topic, and the "Janne-Barbro" thing really confirmed them. I believe I am the cause of your virus trouble, since we had to erase our entire harddrive from a virus (remind me to never EVER EVER download a Sims thing again!) lately. Oupsie... Well, if it was our computer that sent it to you, I'm sorry and I hope it's over soon.

I doubt it...but if it is...then...Ugh

I seem to be getting a lot of these kinds of virus emails over the past two weeks. My virus software is 100% up to date however (it downloads updates as soon as I start Windows), so I am always protected. The attachment is always blocked and quarantined.

One that I recieved today was entitled Sos! and was sent from abe babe (in lower case only, which I never use) to info@oddworld.com.

Another I got said it came from twistedfirestarter.

I seem to get the impression that the majority of the ones that I receive come from viruses (or programs) that scan the internet for email addresses. As I rarely receive them to my main email address, but usually to the addresses listed on my website such as info@oddworld.au.com, links@oddworld.au.com, etc.

I know some of you (DH, Teal, Dragadon) have your own sites also, so if you have your email address listed on there, it could also be coming that way. Either that or it is getting the addresses from another source (address book or similar).

Abe Babe...