|
Answer» Hi guys i recently recieved a file through msn which i believed to be from a friend as it was his name sending it. but when i contacted him to see what it was he said it was not him! how is that possibe
The file in question is DO NOT CLICK THIS LINK:-
www.G038_jpg-msn i was at the friends in question when i was remotley connected to home and saw that he wz\sw sending me the same file again but i know he couldn't because i was using his pc to connect to mine the wife acidently accepted it and i am now a little weary of what it has done to my pc as she opened it and she said that nothing had happened when she did
please please help am i in trouble Kind regards Matt You should run a scan with Kaspersky's Online Scanner and post the log here. When that is done, also post a HijackThis log for us to take a look at.Why post a link that shouldn't be clicked ? ?
I don't get it.The first thing I did was click on the link (wet paint syndrom) and got exactly what I expected. Do not click on that linkThankfully, it's not a proper link, so none of us have anything to worry about.This is an MSN worm. These can pretend to be from a friend whose machine is infected. Also this one exploits the fact that nobody under about 25 knows about the old MS-DOS .com file extension for executable files. They think .com means a web site so they click on it.
Backdoor.Win32.IRCBot.aex (Kaspersky Lab) is also known as: W32.Esbot.B (Symantec), BackDoor.IRC.Sdbot.126 (Doctor Web), Win32.Worm.EsBot.B (SOFTWIN), Worm.ESBot.B (ClamAV), Bck/IRCbot.KG (Panda), Win32/IRCBot.OO (ESET)
* The following behaviors have been observed for this OBJECT: * Installs programs. * Deletes programs. * Invokes dll COMPONENTS. * Creates Run Keys. * Runs other programs. * Communicates with web sites using httpout protocols. * Has outbound communications. * Creates known malware. * Creates copies of itself.Due to lack of feedback, I am closing this topic. If you are the original poster and you would LIKE this topic to be re-opened for any REASON, PM me or another moderator and it can be arranged.
If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem.
|