Date: Sun, 8 Aug 2004 14:39:49 +0100 From: "mrlipring" <mrlipringnospamotmail.com> Subject: Re: Xenon 2
"Johannes H Andersen" <johsnospamccueuesizefitterwruovweswernuao.com> wrote in message news:411624A6.29F4A86Dnospamccueuesizefitterwruovweswernuao.com... > > > Colin Stamp wrote: > > > [...] > > >> And this is pretty damn off topic. Virus, is it? > > > > > >You must be the first person on usenet that has replied to this. It might > > >well be a virus, who knows? But since it has been posted all over the place, > > >it is probably a virus. The zip is the clue; never touch a zip unless you > > >already know what it is. Zip files can be self starting, in which case > > >clicking on the URL is no different to clicking on an .exe . > > > > Found this on another group.... > > > > >Yes, it's a virus or trojan. Installs itself as > > >%SYSTEMROOT%\SYSTEM32\msconfigs.exe > > >Task manager will show a running process called msconfigs.exe. End the > > >process and go and delete the file. > > > > > >Run regedit and go to: > > > > > >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run > > > > > >Then remove the entry called VirusScanner. > > > > > >Not sure why my NOD32 didn't get it, and it's a novell one this - the > > >archive actually looks like a game. > > Again this is social engineering. Youngsters can't resist trying a new > game. Oh and another clue is the hotmail account. Probably the lot is > posted from an internet cafe. > > Take care. it's not a new game! It's over ten years old ;)