K....heres the story...was downloading an mp3 from Kazaaa (little did i realize it had a vbs extension) then when i tried plain it, nothin happened...so i deleted the file....then, next thing i know, my computer starts workin on something...found it extremeley strange... so i press Ctrl+Alt+Del and close WScript which i found was suspiciously running.....i forgot to stop that when i started up my comp today...... and boom....

i found all my mp3s were changed to 11kb vbs files...but then..lucky me, the original mp3s were hidden

so i have all my mp3s..but loads of jpegs and txt files got infected and i couldnt retrieve them like the mp3s....i read the script of the virus...damn....its bad....anyone know how i may be able to get back all what i lost???or is it gone for good??

___________________
www.elkdee.com
Soundcloud sampler: www.soundcloud.com/elkdee

dont know about restoring your files, but why wernt you running a virus scanner??

___________________

Beware of killer hamsters and the random running dogs.

I heard about this the other day!!

quote:

Originally posted by jonsimmonds dont know about restoring your files, but why wernt you running a virus scanner??

well virus scanners always tend to slow down my junk of a pc by over 50% so.......

___________________
www.elkdee.com
Soundcloud sampler: www.soundcloud.com/elkdee

dude that sucks....
i have McAfee Online Virus....and IMO, it's the best...
might not have as many features as Norton, but service is great...

about your files, there was a proggy, forgot it's name tho, it will restore your files....
But were you able to get rid of the virus???
If not, get a free copy of virus scan, and get the virus out of your comp...
If you need removal instructions, i'll try and get them for you...

And about that program, try searching using the SEARCH feature, you should find it...

___________________

try this one its free and has done hte job for me, click on the link!

LINK


Jon

___________________

Beware of killer hamsters and the random running dogs.

About the virusscan proggie, I'm using Norton, way userfriendly, but in quality MCAfee and Norton are similar, they're both the best you can get.

About your problem, a friend of mine had it too. You should run a virusscan, delete the virus and then manually solve the changes.
What the virus does is copy your filenames and create new files with those names. Nothing gets deleted, it just gets messy. You need to delete the useless files to get back to normal. A little effort and problem solved. oh, and next time run a virusscanner!!!! It's better to loose speed than to get nuked by some *ssh*le!!!

___________________
This is my sig.

quote:

Originally posted by Kamaya About the virusscan proggie, I'm using Norton, way userfriendly, but in quality MCAfee and Norton are similar, they're both the best you can get. About your problem, a friend of mine had it too. You should run a virusscan, delete the virus and then manually solve the changes. What the virus does is copy your filenames and create new files with those names. Nothing gets deleted, it just gets messy. You need to delete the useless files to get back to normal. A little effort and problem solved. oh, and next time run a virusscanner!!!! It's better to loose speed than to get nuked by some *ssh*le!!!

not for the jpeg files, it replaces the file with the VBscript

___________________
www.elkdee.com
Soundcloud sampler: www.soundcloud.com/elkdee

quote:

Originally posted by Tranex02 dude that sucks.... i have McAfee Online Virus....and IMO, it's the best... might not have as many features as Norton, but service is great... about your files, there was a proggy, forgot it's name tho, it will restore your files.... But were you able to get rid of the virus??? If not, get a free copy of virus scan, and get the virus out of your comp... If you need removal instructions, i'll try and get them for you... And about that program, try searching using the SEARCH feature, you should find it...

please tell me which software can restore the files co si dont wanna loose everything....

___________________
www.elkdee.com
Soundcloud sampler: www.soundcloud.com/elkdee

I think you're SOL bud...

Source: Symantec

quote:

VBS.LoveLetter and variants Discovered on: May 5, 2000 Symantec Security Response has identified 82 variants of this worm. The latest is VBS.LoveLetter.CN. Virus definitions dated May 31, 2001, or later detect and remove all of these known variants. Occasionally new variants of this worm are discovered. Norton AntiVirus may, at times, detect these new variants as VBS.LoveLetter.Variant. This is a generic detection indicating that the worm is a new variant of VBS.LoveLetter that has not yet been specifically identified and named. NOTE: If Norton AntiVirus detects VBS.LoveLetter.Variant, we suggest that you quarantine and submit the file to SARC for analysis. See the document How to submit a file to Symantec Security Response using Scan and Deliver. You can protect your computer from all known variants of the VBS.LoveLetter worm by downloading the latest virus definitions using LiveUpdate or from http://www.symantec.com/avcenter/download.html. A tool to repair the VBS.LoveLetter infection, including all known variants (except VBS.Loveletter.CA, VBS.Loveletter.BJ, VBS.Loveletter.BM and VBS.Loveletter.AS), is available here. Symantec Security Response began receiving reports regarding this worm in the early morning of May 4, 2000, GMT. This worm originated in Manila, Philippines. It had wide-spread distribution, and infected millions of computers. This worm sends itself to email addresses in the Microsoft Outlook address book and also spreads to Internet chatrooms using mIRC. This worm overwrites files on local and remote drives, including files with the extensions .vbs, .vbe, .js, .jse, .css, .wsh, .sct, .hta, .jpg, .jpeg, .wav, .txt, .gif, .doc, .htm, .html, .xls, .ini, .bat, .com, .avi, .qt, .mpg, .mpeg, .cpp, .c, .h, .swd, .psd, .wri, .mp3, and .mp2. The contents of most of these files are replaced with the source code of the worm, destroying the original contents. The worm also appends the .vbs extension to each of these files. For example, image.jpg becomes image.jpg.vbs. However, files with .mp2 and .mp3 extensions are merely hidden and not destroyed. Norton SystemWorks users can recover these files if NProtect is running at the time of infection. VBS.LoveLetter also tries to download a password-stealing Trojan horse program from a Web site. Also Known As: Lovebug, I-Worm.LoveLetter, VBS/LoveLetter.A, VBS/LoveLet-A Type: Worm Infection Length: 10,307 bytes

___________________
"...End? No, the journey doesn't end here. Death is just another path...one that we all must take.
The grey rain-curtain of this world rolls back, and all change to silver glass...and then you see it...
...white shores...and beyond...the far green country under a swift sunrise."

Oh i hate viruses!!

___________________

One of the few ones left

i have a similar problem. I have many different viruses. But i run norton and it cannot repair them, delete them, or quarantin them. AARGH. I emailed them with suggestions and they say delete the files in safemode, and replace it with the original. What does this mean? where can i get this "original" ?

what i am worried about is that files such as the winnit.exe file and other important ones have been infected. Can i really afford to go messing about with such important files?