Oh S***! Thread

	Posts
Oh S*! (Forums : Tech Support : Oh S*!)		Locked
Thread Options
ShortCutMan ♥ Pure ♥ Bred ♥ Geek ♥	Jun 8 2003 Anchor
ShortCutMan ♥ Pure ♥ Bred ♥ Geek ♥	Well, I ran a virus check today, and it turns out I have a virus in a program called "MSCCN32.EXE". The virus cannot be removed, neither can the program be moved to a folder where it will be kept away from things. What can I do now?! I'd had a virus before, and it ended up having me to format my HD. Fortunatly, this virus is only on one file. I don't have the Windows CD because umm....coughpiratedcough. Its WinME if you need to know. If you have suggestions, please tell. -- 98% of the internet population has a Myspace. If you're part of the 98% that is an emo bastard, copy and paste this into your sig.
ShortCutMan ♥ Pure ♥ Bred ♥ Geek ♥	Jun 8 2003 Anchor
ShortCutMan ♥ Pure ♥ Bred ♥ Geek ♥	Sorry for the double post, but it was nessercery to bump this up. The virus is I-Worm/Sobig.B I foundout that it attaches itself to the windows registery. It uses the following registery auto run keys: HKCU\Software\Microsoft\Windows\CurrentVersion\Run System Tray = %WindowsDir%\msccn32.exe HKLM\Software\Microsoft\Windows\CurrentVersion\Run System Tray = %WindowsDir%\msccn32.exe I think what I should do is remove the registery keys, and then delete the fil. I've managed to find the virus's config file, and it hasn't been able to find any email address on my computer. I've backed up my registery, so that should be alright. If you know how to find those registery keys, please tell. Thanks a lot. -- 98% of the internet population has a Myspace. If you're part of the 98% that is an emo bastard, copy and paste this into your sig.
Sajt	Jun 8 2003 Anchor
Sajt	1. Take sledgehammer 2. Find where in your CPU winME hides 3. Smash it 4. Smash yourself for downloading winME --
ShortCutMan ♥ Pure ♥ Bred ♥ Geek ♥	Jun 8 2003 Anchor
ShortCutMan ♥ Pure ♥ Bred ♥ Geek ♥	Didn't download it Hopefully I deleted the registery settings properly. I deleted the program + config file, and backed up the registery. Restarting now. If you don't here from me, the f***ing virus wrecked my comp. -- 98% of the internet population has a Myspace. If you're part of the 98% that is an emo bastard, copy and paste this into your sig.
chis Old man.	Jun 8 2003 Anchor
chis Old man.	i get virus to much ive destroyed alot of pc's in my time... yup.. . im EXTRA carefull now.. kinda -- Nothing.
Sajt	Jun 8 2003 Anchor
Sajt	Bye-bye SCM. I mean, see you soon, I mean... *me ignores MR.ShortCutMan My computer is dying too... it's been a few years since my last reformatting, so I'm probably going to be doing that in the next month or so. --
BigBird Mod DB Pilot	Jun 8 2003 Anchor
BigBird Mod DB Pilot	me stabs the person(s) who invented virii me stabs the person(s) who continue making virii stupid nincompoops... -- BigBird Mod DB Guy Play Something Different
Sajt	Jun 8 2003 Anchor
Sajt	Teehee, 'virii'. I posted before you!! (Weird... I post, and when I get sent back to the forum, your post is after mine!) - Edited By SeienAbunae On Sun 8th, Jun 2003 @ 7:44:24pm --
ShortCutMan ♥ Pure ♥ Bred ♥ Geek ♥	Jun 8 2003 Anchor
ShortCutMan ♥ Pure ♥ Bred ♥ Geek ♥	HELLO!!!!! I am back. Computer is working all properly. That took me nearly an hour or so to find the virus, research it, and then get rid of it. -- 98% of the internet population has a Myspace. If you're part of the 98% that is an emo bastard, copy and paste this into your sig.
BigBird Mod DB Pilot	Jun 8 2003 Anchor
BigBird Mod DB Pilot	good god! he's back... well thats the end of this chapter on scm's life... SA: it's prolly cos i'm australian and cool or something -- BigBird Mod DB Guy Play Something Different