Jump to content


Photo

Aim Profile Virus Problem Thingy


  • Please log in to reply
3 replies to this topic

#1 thomes08

thomes08

    X-S Freak

  • Members
  • PipPipPipPipPip
  • 1,619 posts
  • Interests:XBOX! HOCKEY! POT AND SHROOMS! BEER!

Posted 02 December 2003 - 02:05 PM

Hey i have this message in my AIM profile at all times

"I can't believe I found %n Picture here
HAHAHA"

I get get rid of it but then everytime i sign off and back on it's there again and the other stuff in there is gone. When people click on it then the sae thing happens to them.
Have you guys heard of this and how do i get rid of it.

thanks a bunch!

thomes08

#2 thomes08

thomes08

    X-S Freak

  • Members
  • PipPipPipPipPip
  • 1,619 posts
  • Interests:XBOX! HOCKEY! POT AND SHROOMS! BEER!

Posted 02 December 2003 - 06:45 PM

bump it up!

#3 drekkar

drekkar

    X-S Member

  • Members
  • Pip
  • 84 posts

Posted 02 December 2003 - 07:10 PM

it's probably a link to a site which uses one of 32453248372 internet explorer exploits. Since you already have it, go trace it, and disassemble it.

most likely it copies itself to a certain registry that starts up with your computer.
without the actual exe, I cannot tell you exactly what it does, but I have a good guess...

go to start->run and type regedit

go to HKEY_LOCAL_MACHINE (check hkey_current_user too) -> software -> MS -> windows -> currentversion -> run

everything in there starts up with your comp

there is alot of other ways it could be starting up with your machine, but this is the most common way. If the creator is smart about it you might have to do a little more work, but the best way would be like I said to get the exe and have it tell you what it does smile.gif reverse engineering baby biggrin.gif

Edited by drekkar, 02 December 2003 - 07:11 PM.


#4 thomes08

thomes08

    X-S Freak

  • Members
  • PipPipPipPipPip
  • 1,619 posts
  • Interests:XBOX! HOCKEY! POT AND SHROOMS! BEER!

Posted 02 December 2003 - 07:37 PM

thanks man i just figured out how to get rid of it. It's not a virus just adware. If anyone has it and wants to know how to get rid of it easily just let me know

thanks a lot

thomes08




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users