Very Nasty Virus I Just Picked Up

RyoOhkiRyoOhki Join Date: 2003-01-26 Member: 12789Members
<div class="IPBDescription">Having to format</div> So I'm sitting in MIRC idleing the hours away when someone, a regular (heck I know him in RL), in one of the channels I'm in posts a link to a jpeg pic. Always one to click on random stuff, I click on it.

Well 5 seconds later, everything Windows related simply stops working. All programs currently running freeze, with the exception of MIRC. Thinking that windows XP perhaps had a brain freeze I rebooted my system. To be greated by a lovely error message telling me one of my Windows kernel files was corrupted.

After myself and 2 of my IT-savvy housemates battled with XP CDs and attempted repairs, we finally installed XP to my secondary HDD and used that to boot into Windows (that's how I'm here typing this). None of us have any idea how to repair the original install of Windows on my other HDD. Norton didn't pick up any virus either so it must be something fairly new. Currently I'm shifting everything off my primary HDD to my secondary HDD in preperation for a full format tommorow.

So just a warning to people that for the next few days, be very careful of any IRC links. Grab the latest Microsoft update if you run Windows, as this would seem to stop this particular bug.

Comments

  • CForresterCForrester P0rk(h0p Join Date: 2002-10-05 Member: 1439Members, Constellation
    Hmm... It would be rather tricky, but you could try to trick Windows in using "sfc /scannow" on the broken installation. Or you could try the recovery console, to replace the kernel files from the CD.
  • RPG_JssmfulhudRPG_Jssmfulhud Join Date: 2002-11-02 Member: 4006Members
    If it IS a virus, it could be problematic with you copying the stuff to the other HDD... May contain the virus too...
  • X_StickmanX_Stickman Not good enough for a custom title. Join Date: 2003-04-15 Member: 15533Members, Constellation
    There is a virus/trojan going round on IRC. If someone keeps spamming a link to something ending with "Britney.jpg < Uhh.... Have a look!" or something like that, they don't know they're doing it.

    When you check the link, it puts a script (and a trojan) onto your computer which makes you spam the link without realising it, so uh, don't click that link <!--emo&:D--><img src='http://www.unknownworlds.com/forums/html/emoticons/biggrin.gif' border='0' style='vertical-align:middle' alt='biggrin.gif'><!--endemo-->.
  • BeRzErKeRBeRzErKeR Join Date: 2003-02-18 Member: 13691Members
    I am SO happy I don't have IRC right now. My (our family's, really) PC is full of house repair photos and other important stuff and my dad (and I) would probably go nuts if they were lost.
  • DubbilexDubbilex Chump Join Date: 2002-11-24 Member: 9799Members
    Meh. You gotta <i>live on the edge</i>.

    Having IRC is like pouring speed under your eyelids. Yes - <i>that </i> much of a criminal rush! Just think of all the zaniness you're missing out on! <!--emo&;)--><img src='http://www.unknownworlds.com/forums/html/emoticons/wink.gif' border='0' style='vertical-align:middle' alt='wink.gif'><!--endemo--> <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html/emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif'><!--endemo-->
  • TenSixTenSix Join Date: 2002-11-09 Member: 7932Members
    IRC Rule #1: Never click on picture links.
    IRC Rule #2: Never click on flash movie links.
  • InfinitumInfinitum Anime Encyclopedia Join Date: 2002-08-08 Member: 1111Members, Constellation
    <!--QuoteBegin--X_Stickman+Oct 27 2003, 03:39 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (X_Stickman @ Oct 27 2003, 03:39 AM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> something ending with "Britney.jpg <!--QuoteEnd--> </td></tr></table><span class='postcolor'> <!--QuoteEEnd-->
    That'd be the one.... a lot of channels I'm in are auto-banning anyone who posts that filename...

    I hope #ns does the same....
  • XodlikeXodlike Join Date: 2003-06-03 Member: 16985Members
    Thats why i just dont bother with IRC..until yesterday.
    Than somebody spammed that link.
    I spammed **** you to him.
  • MulletMullet Join Date: 2003-04-28 Member: 15910Members, Constellation
    Arrghhh...I just clicked on a link on mirc that said somthing like, "members.lycos.com/blahblah/amber.jpg <------My girlfriend" and it was a script. I hope norton blocked it....if not, I'm screwed. <!--emo&:(--><img src='http://www.unknownworlds.com/forums/html/emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif'><!--endemo-->
  • lolfighterlolfighter Snark, Dire Join Date: 2003-04-20 Member: 15693Members
    <!--QuoteBegin--TenSix+Oct 26 2003, 08:19 PM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (TenSix @ Oct 26 2003, 08:19 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->IRC Rule #1: Never click on picture links.
    IRC Rule #2: Never click on flash movie links.<!--QuoteEnd--></td></tr></table><span class='postcolor'><!--QuoteEEnd-->
    Amendment: Until somebody else has played guinea-pig for you, that is.
  • antifreezeantifreeze The guy with the goods&#33; Join Date: 2003-05-12 Member: 16232Members, Constellation
    my thoughts would be. cant you just copy a new version (from the fresh install) of the dodgy files over to your primary HDD.
  • RyoOhkiRyoOhki Join Date: 2003-01-26 Member: 12789Members
    <!--QuoteBegin--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->Arrghhh...I just clicked on a link on mirc that said somthing like, "members.lycos.com/blahblah/amber.jpg <------My girlfriend" and it was a script. I hope norton blocked it....if not, I'm screwed<!--QuoteEnd--></td></tr></table><span class='postcolor'><!--QuoteEEnd-->

    Norton won't block it. I know that from current experiance <!--emo&:(--><img src='http://www.unknownworlds.com/forums/html/emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif'><!--endemo--> The latest Windows update would seem to protect against it, but not fix it.

    <!--QuoteBegin--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->
    my thoughts would be. cant you just copy a new version (from the fresh install) of the dodgy files over to your primary HDD. <!--QuoteEnd--></td></tr></table><span class='postcolor'><!--QuoteEEnd-->

    Looking at trying to do that today. However, there's still the problem of finding the virus.
  • J3kJ3k Join Date: 2003-09-04 Member: 20562Members
    damn..that must suk...thx for info ryo...guess i gotta watch out for it
  • OttoDestructOttoDestruct Join Date: 2002-11-08 Member: 7790Members
    Anyone find a fix for this? I think I have it <!--emo&:(--><img src='http://www.unknownworlds.com/forums/html/emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif'><!--endemo-->
  • BogglesteinskyBogglesteinsky Join Date: 2002-12-24 Member: 11488Members
  • Cartman2beCartman2be Join Date: 2003-09-21 Member: 21103Members
    a few well known NS players have the virus.. i hate it.. why do people make these things.. there just pointless
  • RPG_JssmfulhudRPG_Jssmfulhud Join Date: 2002-11-02 Member: 4006Members
    And thanks for reviving this old thread. Bleh?
Sign In or Register to comment.