dev-cpp-users

[Dev-C++] IMPORTANT: VIRUS

[Abhijit S. <mu...@gm...>]

Greets, people.

I'm sorry, but I had a virus on my comp some days back. All you guys may
have received a message from me (a screensaver named `Love'). Tino, I got it
from you (you're infected, buddy). If you have received it and run it, then
you're infected too. If you haven't opened it, DON'T! Don't trust anti-virus
programs, unless you have the latest updates. Norton 2002 didn't detect it).
Here's what I did.

NOTE:

I have XP. I don't know if this process will work on Win9x. If it doesn't,
mail me, I'll try to help. Also, you have to follow these steps in the right
order.

CLEANING:

1. Delete the message (Not this one, stupid! The one that says `Love
screensaver' or something).

1. Try opening task-manager (press Ctrl-Alt-Del). If it disappears
immediately, it means you're infected. Regedit, Norton, etc. most probably
won't open too.

2. Download any process-viewer/killer application. I used PrcView (which
was, fortunately, already installed on my system). Get it at
http://www.teamcti.com.

3. Run it, kill the process called `WinServices.exe' or `WinServices'.
Confirm that you want to kill it when it asks you. Note that it is
`WinServices', not merely `Services', which is a legitimate process.

4. Delete the file
        c:\windows\system32\WinServices.exe
If you don't trust me, just back it up (keep it zipped, and rename it to
.tmp, so that there's no chance of accidental re-infection).

5. Go to `Start' > `Run'. Type `regedit', and click OK.

6. Navigate to
        HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.

7. Delete the value on the right that says something like this:
        c:\windows\system32\WinServices.exe

9. Forward this mail to everyone in your address-book (if you use Outlook
Express/Netscape Messenger/Eudora/etc.) Web-mail users are safe (I think).

SYMPTOMS OF INFECTION:

1. Task manager closes as soon as it's opened.

2. Regedit, Anti-virus programs don't run.

3. You get mail from people in your people you don't know, saying that you
sent them a message.

4. People in you address-book get mail from you, when you haven't sent any.

5. Your hard-disk is thrashing.

Sorry for the long (and possibly unnecesary) mail.

___________________________________________________________

Abhijit Shylanath

E-mail:   mu...@gm... || ibr...@bi...
Web-site: http://mudeth.tripod.com/

GO TO WWW.GOOGLE.COM AND CHECK FOR HOAX Re: [Dev-C++] IMPORTANT: VIRUS

[Eric R. <e.r...@pa...>]

BEFORE YOU DO ANYTHING=20




WHEATER ACTING FROM A UNKNOWEN eMAIL OR JUST A FRIEND




GO TO www.google.com



AND PLUG IN INFORMATION FROM THE eMAIL=20




AND SEE IF IT IS A HOAX eMAIL WARNING NOTICE.=20

=20

sORRY IF THIS eMAIL IS NOT A HOAX=20





BUT i AM GETTING SICK ALL THE TIME OF HOAX eMAIL TELL ME TO DELETE FILES =
AND=20
CHANGE MY SYSTEM AROUND,




i WISH EVERYONE WOULD CHECK OUT TO SEE IF THAT STORY IS A HOAX BEFORE THE=
Y=20
PASS IT AROUND.









=46rom Eric
http://www.oh-bugger.net.nz
http://homepages.paradise.net.nz/erichard/=20
 No attachment was sent with this Email=20
Just to remind you on Thu, 02 Jan 2003 00:52, Abhijit Shylanath wrote:
-> Greets, people.
->
-> I'm sorry, but I had a virus on my comp some days back. All you guys m=
ay
-> have received a message from me (a screensaver named `Love'). Tino, I =
got
 it -> from you (you're infected, buddy). If you have received it and run=
 it,
 then -> you're infected too. If you haven't opened it, DON'T! Don't trus=
t
 anti-virus -> programs, unless you have the latest updates. Norton 2002
 didn't detect it). -> Here's what I did.
->
-> NOTE:
->
-> I have XP. I don't know if this process will work on Win9x. If it does=
n't,
-> mail me, I'll try to help. Also, you have to follow these steps in the
 right -> order.
->
-> CLEANING:
->
-> 1. Delete the message (Not this one, stupid! The one that says `Love
-> screensaver' or something).
->
-> 1. Try opening task-manager (press Ctrl-Alt-Del). If it disappears
-> immediately, it means you're infected. Regedit, Norton, etc. most prob=
ably
-> won't open too.
->
-> 2. Download any process-viewer/killer application. I used PrcView (whi=
ch
-> was, fortunately, already installed on my system). Get it at
-> http://www.teamcti.com.
->
-> 3. Run it, kill the process called `WinServices.exe' or `WinServices'.
-> Confirm that you want to kill it when it asks you. Note that it is
-> `WinServices', not merely `Services', which is a legitimate process.
->
-> 4. Delete the file
->         c:\windows\system32\WinServices.exe
-> If you don't trust me, just back it up (keep it zipped, and rename it =
to
-> .tmp, so that there's no chance of accidental re-infection).
->
-> 5. Go to `Start' > `Run'. Type `regedit', and click OK.
->
-> 6. Navigate to
->         HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\R=
un.
->
-> 7. Delete the value on the right that says something like this:
->         c:\windows\system32\WinServices.exe
->
-> 9. Forward this mail to everyone in your address-book (if you use Outl=
ook
-> Express/Netscape Messenger/Eudora/etc.) Web-mail users are safe (I thi=
nk).
->
-> SYMPTOMS OF INFECTION:
->
-> 1. Task manager closes as soon as it's opened.
->
-> 2. Regedit, Anti-virus programs don't run.
->
-> 3. You get mail from people in your people you don't know, saying that=
 you
-> sent them a message.
->
-> 4. People in you address-book get mail from you, when you haven't sent
 any. ->
-> 5. Your hard-disk is thrashing.
->
-> Sorry for the long (and possibly unnecesary) mail.
->
-> ___________________________________________________________
->
-> Abhijit Shylanath
->
-> E-mail:   mu...@gm... || ibr...@bi...
-> Web-site: http://mudeth.tripod.com/
->
->
->
->
->
->
->
-> -------------------------------------------------------
-> This sf.net email is sponsored by:ThinkGeek
-> Welcome to geek heaven.
-> http://thinkgeek.com/sf
-> _______________________________________________
-> Dev-cpp-users mailing list
-> Dev...@li...
-> TO UNSUBSCRIBE: http://www.noicys.cjb.net/devcpp/ub.htm
-> https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
->
->