Date: Sun, 08 Aug 2004 14:03:40 GMT From: Johannes H Andersen <johsnospamccueuesizefitterwruovweswernuao.com> Subject: Re: Xenon 2
Colin Stamp wrote: > [...] > >> And this is pretty damn off topic. Virus, is it? > > > >You must be the first person on usenet that has replied to this. It might > >well be a virus, who knows? But since it has been posted all over the place, > >it is probably a virus. The zip is the clue; never touch a zip unless you > >already know what it is. Zip files can be self starting, in which case > >clicking on the URL is no different to clicking on an .exe . > > Found this on another group.... > > >Yes, it's a virus or trojan. Installs itself as > >%SYSTEMROOT%\SYSTEM32\msconfigs.exe > >Task manager will show a running process called msconfigs.exe. End the > >process and go and delete the file. > > > >Run regedit and go to: > > > >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run > > > >Then remove the entry called VirusScanner. > > > >Not sure why my NOD32 didn't get it, and it's a novell one this - the > >archive actually looks like a game. Again this is social engineering. Youngsters can't resist trying a new game. Oh and another clue is the hotmail account. Probably the lot is posted from an internet cafe. Take care.