Home › Forums › Archives › Instant Messaging › AIM Support › Big help needed with some AIM virus…
- This topic has 11 replies, 9 voices, and was last updated 22 years, 9 months ago by
flamingcube.com.
-
AuthorPosts
-
July 22, 2003 at 7:40 am #12754
thynksheraze
MemberI dunno if this is a virus or something, but i need help.
Someone sent me a link to some file… and i downloaded it and at first it didn’t seem to do anything, but out of no where every time i sent someone a message or just opened their aim box it would AUTOMATICALLY sent this message or some variation: “Sweet, click http://24.54.66.236:8180/”
or something like that. The site doesn’t seem to work anymore. maybe tis flooded by all the people it managed to spam and annoy. I dunno. can you guys help me out? every time i sepak to someone new this happens. Please help.
July 22, 2003 at 1:56 pm #92966.
ParticipantWhile I am not sure exactly what this is I do know what you are talking about. I’m not sure if its a virus, trojan, or worm but I think its a worm. You could try some online scans first…
http://security.symantec.com/sscv6/home.asp?j=1&langid=ie&venid=sym&plfid=20&pkj=IHWFVYZZALEWNSWLWKA
http://housecall.trendmicro.com/
http://www.ravantivirus.com/scan/Please also note that if these do not work I have submitted this to a more approiate forum that is one of my favorites. Wilders Security Forum has people who know about all about this kinda stuff.
http://www.wilderssecurity.com/index.php?board=31;action=display;threadid=11595
July 22, 2003 at 8:34 pm #92963Someguy03
Memberok, its called W32.Aplore@mm , I downloaded the program because i had norton anti virus and it caught it. Its a mass mailing worm that spreads through IRC and AIM. Once you go to the page it tries to download itself 3 or 4 times. I dont suggest anyone clicks the link above unless they have anti-virus running. And even if you dont click download at the site it still tries to install it without you knowing.
More info here: http://securityresponse.symantec.com/avcenter/venc/data/w32.aplore@mm.html
July 22, 2003 at 9:25 pm #92965.
ParticipantIf that is the case then my guess was right in that its a worm. I hope the online scans were able to clean it out for you.
July 23, 2003 at 9:13 pm #92968coolitalian770
MemberUse Norton 2003 professional….works like a dream:D
July 23, 2003 at 10:48 pm #92969GizTheStud
Memberyeah because I sent it to you and now you didnt even want to send me this beatiful ofrum site so I had to look it up my self,
July 23, 2003 at 11:20 pm #92970koreanboy417
Memberdoes naybody know how to send small viruses so wen thbey click on it a virus will pop up j
July 24, 2003 at 2:49 am #92964.
Participantkoreanboy417
We are not here to support the spreading of virus or any other malicious program but are trying to help this person destroy this worm. Please don’t ask us if we know how to spread a virus through AIM.
July 24, 2003 at 3:54 am #92967thynksheraze
MemberThank you very much, all of you. With your advise i helped fix the problem. What i did was i wento n google and researched it, and was finding nothing at first, but then out of nowhere a website told me exactly what it was (just like someone above said), it was a aplore worm or something like that. I found the registry key and got rid of it. Then i simply used housecall to finalize everything.
I had used housecall before, however because of the fact that it kept restarting when i restarted my cpu, it remained there for a while. I had to get rid of this worm in the registry first. Thanks everyone
September 12, 2003 at 2:43 pm #92971necrology-inc.
MemberYeah, I just got that I think, if you could post the site where you got your info on how to remove it, that’d be great
September 15, 2003 at 6:46 pm #92972Gizzzer98
MemberYeah, the site where you found the info would be good.
Spread the word!!!
December 3, 2003 at 5:44 am #92973flamingcube.com
MemberYou can find a removal tool and manual removal instructions on my site: http://flamingcube.com/help/aimvirus.htm
If you have any questions feel free to post it on my forums.
-
AuthorPosts
- You must be logged in to reply to this topic.