Stupid Fucks on IRC

[Fedaykin]

yeah its my fault for cliking but:

some stupid twat (excuse my language) posted a link, which crashed my comp and has installed loads of shit and seems to open when i load up notepad

anyone know how to get rid of it?

 

[granny]

Learning experiences are always painful....

And now for the useful answer - update & run your anti-virus software, install, update and run ad-aware and spybot-search&destroy, then go from there.

 

[bult]

[9:34pm] (?) Brim|ffx2 changed topic to: If you've opened this link; http://people.blabla.de/cdeniz/......jpg do the following : in c:\windows\temp there is 3 files ( lol.bat lol.lnk mirc.exe ), delete these and you're clean!
[9:35pm] Carlos-Bananos: delete owned.txt from ur registry after deleting those files

 

[gunner440]

not like it was their fault they posted the link ~~

 

[swords]

Ouch, silly buggers

 

[Shrye]

Wonder who's the most stupid one - those getting infected initially, or those who kept visiting the links, despite of warnings/glines

 

[judas]

yeah its my fault for cliking but:

some stupid twat (excuse my language) posted a link, which crashed my comp and has installed loads of shit and seems to open when i load up notepad

anyone know how to get rid of it?

you know your one of thouse "stupid twat's" that post these links on irc aslong as you still have the worm

 

[Vodkafairy]

[9:34pm] (?) Brim|ffx2 changed topic to: If you've opened this link; http://people.blabla.de/cdeniz/......jpg do the following : in c:\windows\temp there is 3 files ( lol.bat lol.lnk mirc.exe ), delete these and you're clean!
[9:35pm] Carlos-Bananos: delete owned.txt from ur registry after deleting those files

deleting those files didn't work

 

[Fedaykin]

you know your one of thouse "stupid twat's" that post these links on irc aslong as you still have the worm

well i'm not since i deleted irc

 

[Corell]

deleting those files didn't work

you need to delete notepad, that got infected too

 

[Ging]

lmao @ all above

 

[Spamb0t]

delete notepad.exe in windows\system32 (its got a changed icon so not exactly hard to spot if u got a clue!)
copy notepad.exe from windows\ to windows\system32


and if u actually noticed it starts when u start notepad... then it prolly is a problem with notepad huh? how about fixing it before starting it again? u can wonder who the 'stupid fuck' is!

 

[Vodkafairy]

is gone now, deleting notepad + those files worked now

thx :X

 

[Divinia]

one time in rvr i got this virus on irc.

 

[Drummer]

Yes thank u for posting RvR discussion , have a nice day

 

[f1sty]

Trojan horse virus installed. Hope you all keep your DAoC passwords safe.

Obviously the new version of Notepad you unwittingly installed is probably sending anything it has in it to someones pc. Im sure a few ppl who caught this late will be a little upset, especially if they copy and paste their passwords from Notepad.

 

[[NO]Magmatic]

You'd almost install a virus scanner + firewall...

 

[Kathal]

Online virus scan
Spyware scan
GL with it.

 

[Reloaded]

im like not gonna press any link on this topic tbh :<

 

[f1sty]

is gone now, deleting notepad + those files worked now

thx :X

hhaha well Ill be surprised if thats cleared all the files. Im sure there will probably be some hidden trojans still around. Just gotta hope that anti-virus progies are upto date with this spyware. I mean if I was gonna do summat like this I wouldnt just change notepad, Id change a few other editors, such as write etc. Ill be surprised if it doesnt replicate itself again once infected.

Also doing the following sounds dodgy:

delete notepad.exe in windows\system32 (its got a changed icon so not exactly hard to spot if u got a clue!)
copy notepad.exe from windows\ to windows\system32

Reason: it sounds too easy a fix, I mean if this link overwrote notepad in windows\system32 with a new version, why the hell did it not replace the one in windows\ to cover all bases. This would prevent ppl from simply copying one version of notepad over the other, and also dont think cos the icon is different that it means something. This could be a red herring.

My advice would be to format your hard drive completely then throw the pc out the window, to be safe. Then wash your hands after.

 

[Corell]

hhaha well Ill be surprised if thats cleared all the files. Im sure there will probably be some hidden trojans still around. Just gotta hope that anti-virus progies are upto date with this spyware. I mean if I was gonna do summat like this I wouldnt just change notepad, Id change a few other editors, such as write etc. Ill be surprised if it doesnt replicate itself again once infected.

Also doing the following sounds dodgy:



Reason: it sounds too easy a fix, I mean if this link overwrote notepad in windows\system32 with a new version, why the hell did it not replace the one in windows\ to cover all bases. This would prevent ppl from simply copying one version of notepad over the other, and also dont think cos the icon is different that it means something. This could be a red herring.

My advice would be to format your hard drive completely then throw the pc out the window, to be safe. Then wash your hands after.

could you follow your own advise then so you dont spam shit like this again?

 

[f1sty]

could you follow your own advise then so you dont spam shit like this again?

ok.

Seriously though apart from throwing pc out of window, what Im saying is valid. People who got this virus should be careful is all. Dont simply delete something and think its gone. Lots of these things stay memory resident for a start so simply deleting a file will not be sufficient....

 

[Kathal]

Online virus scan
Spyware scan
GL with it.

I use them myself and my PCs is just fine.

im like not gonna press any link on this topic tbh :<

Afaik it would be removed asap if it was BS.

If your PC don't reboot over and over again these 2 free scan programs should do the trick.

PS. It can be trixy to find the spyware remover programs. Some buy the URLs close to the real ones like www.ada-ware.com(don't use this one) and www.adaware.com(don't use this one). The real one is www.ad-aware.com (the one I have posted a link to.)

PPS. Im not 100% that the spyware scan program is 100% updated. Its a .exe file you download and install. Dunno about updates, but it seems to catch all spyware on my PC.

 

[crispy]

The first mistake you made were using internet explorer. Its such a insecure browser with plenty of bugs wich allows certain code to run on your computer. You can never tell from a link if its a worm etc, even innocent pictures may install some crappy virus in your computer if you're running IE. Install opera or some other great browser.

you -> <- IE

 

[Coim]

Mozilla = win.

 

[Nalistah]

Get a download-program.. i use DAP (Download Accelerator Plus).. it ask everytime if u wanna download the file or not.. that got me saved.... I, as many others, clicked the link as well, and I got asked if I wanted to download "owned.exe" ... heh.. pretty easy answer.. clicked "no" and i didn't get infected \o/..

 

[Deacan]

Use Firebird browser its a hell lot better than the shit they call IE.

 

[stubbe]

Get a download-program.. i use DAP (Download Accelerator Plus).. it ask everytime if u wanna download the file or not.. that got me saved.... I, as many others, clicked the link as well, and I got asked if I wanted to download "owned.exe" ... heh.. pretty easy answer.. clicked "no" and i didn't get infected \o/..

getright works too

 

[Raven]

i use DAP too, very usefull prog

 

[vintervargen]

i use winamp browser