|
Love Letter Virus infected my comp....HELP!!!
|
View this Thread in Original format
| DJ El Kay Dee |
K....heres the story...was downloading an mp3 from Kazaaa (little did i realize it had a vbs extension) then when i tried plain it, nothin happened...so i deleted the file....then, next thing i know, my computer starts workin on something...found it extremeley strange... so i press Ctrl+Alt+Del and close WScript which i found was suspiciously running.....i forgot to stop that when i started up my comp today...... and boom....
i found all my mp3s were changed to 11kb vbs files...but then..lucky me, the original mp3s were hidden
so i have all my mp3s..but loads of jpegs and txt files got infected and i couldnt retrieve them like the mp3s....i read the script of the virus...damn....its bad....anyone know how i may be able to get back all what i lost???or is it gone for good??:conf: :conf: :conf: |
|
|
| jonsimmonds |
| dont know about restoring your files, but why wernt you running a virus scanner?? |
|
|
| G K Murray |
| I heard about this the other day!! |
|
|
| DJ El Kay Dee |
| quote: | Originally posted by jonsimmonds
dont know about restoring your files, but why wernt you running a virus scanner?? |
well virus scanners always tend to slow down my junk of a pc by over 50% so.......:( :( :( :( :( |
|
|
| Tranex02 |
dude that sucks....
i have McAfee Online Virus....and IMO, it's the best...
might not have as many features as Norton, but service is great...
about your files, there was a proggy, forgot it's name tho, it will restore your files....
But were you able to get rid of the virus???
If not, get a free copy of virus scan, and get the virus out of your comp...
If you need removal instructions, i'll try and get them for you...
And about that program, try searching using the SEARCH feature, you should find it... |
|
|
| jonsimmonds |
try this one its free and has done hte job for me, click on the link!
LINK
Jon |
|
|
| Kamaya |
About the virusscan proggie, I'm using Norton, way userfriendly, but in quality MCAfee and Norton are similar, they're both the best you can get.
About your problem, a friend of mine had it too. You should run a virusscan, delete the virus and then manually solve the changes.
What the virus does is copy your filenames and create new files with those names. Nothing gets deleted, it just gets messy. You need to delete the useless files to get back to normal. A little effort and problem solved. oh, and next time run a virusscanner!!!! It's better to loose speed than to get nuked by some *ssh*le!!! |
|
|
| DJ El Kay Dee |
| quote: | Originally posted by Kamaya
About the virusscan proggie, I'm using Norton, way userfriendly, but in quality MCAfee and Norton are similar, they're both the best you can get.
About your problem, a friend of mine had it too. You should run a virusscan, delete the virus and then manually solve the changes.
What the virus does is copy your filenames and create new files with those names. Nothing gets deleted, it just gets messy. You need to delete the useless files to get back to normal. A little effort and problem solved. oh, and next time run a virusscanner!!!! It's better to loose speed than to get nuked by some *ssh*le!!! |
not for the jpeg files, it replaces the file with the VBscript |
|
|
| DJ El Kay Dee |
| quote: | Originally posted by Tranex02
dude that sucks....
i have McAfee Online Virus....and IMO, it's the best...
might not have as many features as Norton, but service is great...
about your files, there was a proggy, forgot it's name tho, it will restore your files....
But were you able to get rid of the virus???
If not, get a free copy of virus scan, and get the virus out of your comp...
If you need removal instructions, i'll try and get them for you...
And about that program, try searching using the SEARCH feature, you should find it... |
please tell me which software can restore the files co si dont wanna loose everything.... |
|
|
| Fir3start3r |
I think you're SOL bud...:( :( :(
Source: Symantec
| quote: |
VBS.LoveLetter and variants
Discovered on: May 5, 2000
Symantec Security Response has identified 82 variants of this worm. The latest is VBS.LoveLetter.CN. Virus definitions dated May 31, 2001, or later detect and remove all of these known variants. Occasionally new variants of this worm are discovered. Norton AntiVirus may, at times, detect these new variants as VBS.LoveLetter.Variant. This is a generic detection indicating that the worm is a new variant of VBS.LoveLetter that has not yet been specifically identified and named.
NOTE: If Norton AntiVirus detects VBS.LoveLetter.Variant, we suggest that you quarantine and submit the file to SARC for analysis. See the document How to submit a file to Symantec Security Response using Scan and Deliver.
You can protect your computer from all known variants of the VBS.LoveLetter worm by downloading the latest virus definitions using LiveUpdate or from http://www.symantec.com/avcenter/download.html. A tool to repair the VBS.LoveLetter infection, including all known variants (except VBS.Loveletter.CA, VBS.Loveletter.BJ, VBS.Loveletter.BM and VBS.Loveletter.AS), is available here.
Symantec Security Response began receiving reports regarding this worm in the early morning of May 4, 2000, GMT. This worm originated in Manila, Philippines. It had wide-spread distribution, and infected millions of computers.
This worm sends itself to email addresses in the Microsoft Outlook address book and also spreads to Internet chatrooms using mIRC. This worm overwrites files on local and remote drives, including files with the extensions .vbs, .vbe, .js, .jse, .css, .wsh, .sct, .hta, .jpg, .jpeg, .wav, .txt, .gif, .doc, .htm, .html, .xls, .ini, .bat, .com, .avi, .qt, .mpg, .mpeg, .cpp, .c, .h, .swd, .psd, .wri, .mp3, and .mp2.
The contents of most of these files are replaced with the source code of the worm, destroying the original contents. The worm also appends the .vbs extension to each of these files. For example, image.jpg becomes image.jpg.vbs. However, files with .mp2 and .mp3 extensions are merely hidden and not destroyed. Norton SystemWorks users can recover these files if NProtect is running at the time of infection.
VBS.LoveLetter also tries to download a password-stealing Trojan horse program from a Web site.
Also Known As: Lovebug, I-Worm.LoveLetter, VBS/LoveLetter.A, VBS/LoveLet-A
Type: Worm
Infection Length: 10,307 bytes
|
|
|
|
| Dj_ExOn |
| Oh i hate viruses!! |
|
|
| DJ Mikey Mike |
i have a similar problem. I have many different viruses. But i run norton and it cannot repair them, delete them, or quarantin them. AARGH. I emailed them with suggestions and they say delete the files in safemode, and replace it with the original. What does this mean? where can i get this "original" ?
what i am worried about is that files such as the winnit.exe file and other important ones have been infected. Can i really afford to go messing about with such important files?
:sadgreen: :sadgreen: :sadgreen: :sadgreen: |
|
|
|
|
