Nuevo Virus ???

Lordek

te aconsejo ke metas en un cd el antivirus, el parche, el firewall y el ultimo fichero de definicion de virus y formatees, e instales todo SIN CONEXION A INTERNET.. cuando lo tengas todo conectate.

Colombo-5

todo esto ta muy bien pero ninguna solucion funciona :(

Lordek

has probado lo que te he dixo y te has instalado un FIREWALL. ? no creo :)

Xr3

Os cuento .me he bajado el parche y me lo he grabado en un Cd .Bien he reiniciado en modo a prueba de fallos .He restaurado el Sistema a fecha de ayer ,he aplicado el parche,he reiniciado y aparentemente esto funciona sin ningun problema (de momento xD ) espero ke os sirva de algo

TeKaNeO

Lordek. ese parche no es porque lo tengo instalao desde que salio y me ha afectao el virus. He usado este otro y me tira de lujo:

http://download.microsoft.com/download/a/b/2/ab2f3bb1-e6ec-498f-b391-82c5a4c9cc4c/WindowsXP-KB835732-x86-ESN.EXE

Probadlo a ver que tal os va, a mi ya no me reinicia ni nada :)

Saludos^^

r6n

yo he instalao el parche y de momento no se me reinicia

toquemos madera! xD

ahora falta esperar ke salga el pqremove o algo para eliminarlo por completo

link directo para winXP
http://www.microsoft.com/downloads/details.aspx?displaylang=es&FamilyID=5FA055AE-A1BA-4D4A-B424-95D32CFC8CBA

instalarlo con el pc acabado de reiniciar y si estar conectados a internet (los de 56k como yo) y el cable de internet desconectao (los de banda ancha)
reiniciad despues de aplicarlo

lo dicho: asias very much lordek ;)

Lordek

tekaneo, existen 4 variantes de virus circulando actualmente para los cuales 3 se reflejan en el 1er parche y el ultimo en el ke tu has puesto :)

r6n

maldita sea!
ke se me reinicia otra vez!
voi a probar el otro parche

ToxicO

Pues yo he formateado, ami tb me pasaba, ya hablamos en pasado xd

ReBeNTuk0

ave ke yo me entere .. como entra el virus ??

r6n

desde luego ke menuda mierda con los windows eh
cada 2x3 salen fallos nuevos y bujeros de seguridad desos xD

ToxicO

Yo he formateado y he instalado el parche x si las moscas, thx x la url lordeck

r6n

joer ya habeis formateado y todo?
ke rapidez!

espero ke ese sea mi ultimo recurso,
el penultimo sera instalar un firewall, pk un colega mio tiene un firewall y no le ha entrao el virus

pero si puedo poner un parche mejor

MikLoN

El virus creo que me ha entrado con el firewall del proxy puesto, lo que pasa que no me ha afectado hasta que he usado internet sin estar conectado al hub, que es cuando lo he descubierto :(

Hybrid

Si señor , aqui lo tengo , me come 3 mil recursos del sistema y me crea chorromil conexiones , lo quitas por el Msconfig y al reiniciar vuelve a aparecer .... la trama , ea hasta que saquen un parche sin reiniciar. He intentado borrarlo y tb me reaparece junto con otro con un nombre inpronunciable ... en fin , mas bugs para el XP que aun le lleva la delantera al Steam :D

r6n

weno pos parece ke ya se ha areglao... de momento,
pk con el otro parche tambien parecia ke se hubiese solucionado y al cabo de un rato PUM!

por si acaso instalaros los 2 parches, nunca se sabe xD

asias a ti tambien, tekaneo, por el link

PD: microsoft SUX!

MikLoN

Yo lo único que he hecho para que se me arregle ha sido ir a Windows Update y bajarme los últimos parches de seguridad que me faltaban por actualizar, ya que hacia tiempo que no los actualizaba :O

No tardan nada, son mas o menos 7 o 10 mb todos los parches de seguridad... y vale la pena :P

SMF_

Dios hace 3 dias q tengo una movida de esas en el pc, pero no me daba el error, y no pdia quitarlo y pase del tema, asta q hoy jugando me salio, fue seguramente por desactivar el firewall...lo volvi a activar al y ia no me sale el error.

Lordek

For details on each of these steps, read the following instructions.

  1. To disable System Restore (Windows Me/XP)
    If you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.

Also, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.

For instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles:
"How to disable or enable Windows Me System Restore"
"How to turn off or turn on Windows XP System Restore"


Note: When you are completely finished with the removal procedure and are satisfied that the threat has been removed, re-enable System Restore by following the instructions in the aforementioned documents.

For additional information, and an alternative to disabling Windows Me System Restore, see the Microsoft Knowledge Base article, "Antivirus Tools Cannot Clean Infected Files in the _Restore Folder," Article ID: Q263455.

  1. To update the virus definitions
    Symantec Security Response fully tests all the virus definitions for quality assurance before they are posted to our servers. There are two ways to obtain the most recent virus definitions:

Running LiveUpdate, which is the easiest way to obtain virus definitions: These virus definitions are posted to the LiveUpdate servers once each week (usually on Wednesdays), unless there is a major virus outbreak. To determine whether definitions for this threat are available by LiveUpdate, refer to the Virus Definitions (LiveUpdate).
Downloading the definitions using the Intelligent Updater: The Intelligent Updater virus definitions are posted on U.S. business days (Monday through Friday). You should download the definitions from the Symantec Security Response Web site and manually install them. To determine whether definitions for this threat are available by the Intelligent Updater, refer to the Virus Definitions (Intelligent Updater).

The Intelligent Updater virus definitions are available: Read "How to update virus definition files using the Intelligent Updater" for detailed instructions.

  1. To restart the computer in Safe mode or VGA mode

Shut down the computer and turn off the power. Wait for at least 30 seconds, and then restart the computer in Safe mode or VGA mode.
For Windows 95, 98, Me, 2000, or XP users, restart the computer in Safe mode. For instructions, read the document, "How to start the computer in Safe Mode."
For Windows NT 4 users, restart the computer in VGA mode.

  1. To scan for and delete the infected files
    Start your Symantec antivirus program and make sure that it is configured to scan all the files.
    For Norton AntiVirus consumer products: Read the document, "How to configure Norton AntiVirus to scan all files."
    For Symantec AntiVirus Enterprise products: Read the document, "How to verify that a Symantec Corporate antivirus product is set to scan all files."
    Run a full system scan.
    If any files are detected as infected with W32.Gaobot.AFC, click Delete.

  2. To reverse the changes made to the registry


WARNING: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.

Click Start, and then click Run. (The Run dialog box appears.)
Type regedit

Then click OK. (The Registry Editor opens.)

Navigate to the key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

In the right pane, delete the value:

"System Updater Service=wmiprvsw.exe"

Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

In the right pane, delete the value:

"System Updater Service=wmiprvsw.exe"

ESTO PARA OTRA VARIANTE

To reverse the changes made to the registry


WARNING: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.

Click Start, and then click Run. (The Run dialog box appears.)
Type regedit

Then click OK. (The Registry Editor opens.)

Navigate to the key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

In the right pane, delete the value:

"windows"="hkey.exe"

Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

In the right pane, delete the value:

"windows"="hkey.exe"

Restart the system.

Y ESTO PARA LA KE KEDA

Click Start, and then click Run. (The Run dialog box appears.)
Type regedit

Then click OK. (The Registry Editor opens.)

Navigate to the key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

In the right pane, delete the value:

"System Updater Service=msiwin84.exe"

Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

In the right pane, delete the value:

"System Updater Service=msiwin84.exe"

Restart the system.

Lordek

Microsoft Windows 2000 Advanced Server SP4:

Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Advanced Server SP3:
Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Advanced Server SP2:
Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Advanced Server SP1:
Microsoft Windows 2000 Advanced Server :
Microsoft Windows 2000 Datacenter Server SP4:
Microsoft Windows 2000 Datacenter Server SP3:
Microsoft Windows 2000 Datacenter Server SP2:
Microsoft Windows 2000 Datacenter Server SP1:
Microsoft Windows 2000 Datacenter Server :
Microsoft Windows 2000 Professional SP4:
Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Professional SP3:
Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Professional SP2:
Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Professional SP1:
Microsoft Windows 2000 Professional :
Microsoft Windows 2000 Server SP4:
Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Server SP3:
Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Server SP2:
Microsoft Patch Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

Microsoft Windows 2000 Server SP1:
Microsoft Windows 2000 Server :
Microsoft Windows Server 2003 Datacenter Edition :
Microsoft Windows Server 2003 Datacenter Edition 64-bit :
Microsoft Windows Server 2003 Enterprise Edition :
Microsoft Patch Security Update for Windows Server 2003 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=EAB176D0-01CF-453E-AE7E-7495864E8D8C&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition 64-bit :
Microsoft Patch Security Update for Windows Server 2003 64 Bit Edition and Windows XP 64 Bit Edition Version 2003 (
http://www.microsoft.com/downloads/details.aspx?FamilyId=C207D372-E883-44A6-A107-6CD2D29FC6F5&displaylang=en

Microsoft Windows Server 2003 Standard Edition :
Microsoft Patch Security Update for Windows Server 2003 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=EAB176D0-01CF-453E-AE7E-7495864E8D8C&displaylang=en

Microsoft Windows Server 2003 Web Edition :
Microsoft Patch Security Update for Windows Server 2003 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=EAB176D0-01CF-453E-AE7E-7495864E8D8C&displaylang=en

Microsoft Windows XP 64-bit Edition SP1:
Microsoft Patch Security Update for Windows XP 64 Bit Edition (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=C6B55EF2-D9FE-4DBE-AB7D-73A20C82FF73&displaylang=en

Microsoft Windows XP 64-bit Edition :
Microsoft Windows XP 64-bit Edition Version 2003 SP1:
Microsoft Patch Security Update for Windows Server 2003 64 Bit Edition and Windows XP 64 Bit Edition Version 2003 (
http://www.microsoft.com/downloads/details.aspx?FamilyId=C207D372-E883-44A6-A107-6CD2D29FC6F5&displaylang=en

Microsoft Windows XP 64-bit Edition Version 2003 :
Microsoft Patch Security Update for Windows Server 2003 64 Bit Edition and Windows XP 64 Bit Edition Version 2003 (
http://www.microsoft.com/downloads/details.aspx?FamilyId=C207D372-E883-44A6-A107-6CD2D29FC6F5&displaylang=en

Microsoft Windows XP Home SP1:
Microsoft Patch Security Update for Windows XP (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=3549EA9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

Microsoft Windows XP Home :
Microsoft Patch Security Update for Windows XP (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=3549EA9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

Microsoft Windows XP Professional SP1:
Microsoft Patch Security Update for Windows XP (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=3549EA9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

Microsoft Windows XP Professional :
Microsoft Patch Security Update for Windows XP (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=3549EA9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

r6n

lol como te lo curras no?
xD

aziaz

zErOx

Que coño ... despues de poner shutdown -a no puedo reiniciar de ninguna forma , ni despues de reinicia rmanualmente , ¿ pruebo a poner shotdown -b ?

R4F4G4

lol tio Lordek como te lo curras bien exo tio ;)

K4Lav3r4

ES EL FINNNN DELLL MUUNNNNDOOOOOOOOO!!!!!!!
Nooooooooooooooooooo
XD A FORMATEAR TOCA!LOL!

ToxicO

si, yo ya no le tengo ayer a las 5 de la mañana formatee lo deja esta noche descargando con el emule y me levanto y a la mierda esta le dan venaos tipo :

  • En inicio\programas (no hay nada)
  • Me dice que la adsl no la reconoce...

bueno yo creo que ya pero vamos te cagas.

ZaItS3V

es el virus blaster te puedes bajar el parche en www.microsoft.es

ToxicO

mazo blaster xd.
Lord tio thx parece que ya no tengo problemasd de ningun tipo ;)

DiAbLo0o

si tioooooo
blaster reloaded
ahora parece ke ataca a otro archivo
la cuenta atras se para en
inicio, ejecutar i ai poneis SHUTDOWN -A
luego no me deja finalizar algunos procesos pk me pone acceso denegado, en nombre de usuario en el administrador de tareas me pone desconodio...
en el msn no me sale el historial de cuentas ke he utilizado...
joder estoi hasta la polla de los virus
voi a pasar el antivirus a ver..
EDITADO: bajando el parche... thx lordek i ahora me instalare el zone alarm xD

Fawks

con una clave original se van descarggando actualizaciones del windows update xddd, ya que la mia es original tengo todos los parches al dia ^^

Piratillas.... joaeojajoeajoea

Usuarios habituales

  • Hybrid
  • DiAbLo0o
  • SuPr4
  • ToxicO
  • r6n
  • Lordek
  • Colombo-5