a new fucking virus wants to fuck all of us

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • WidowSEXplorer
    Registered User
    • Jul 2003
    • 10

    #1

    a new fucking virus wants to fuck all of us

    I found that virus yesterday. What is this Virus doing:
    1. It changes the links on the pages you are opening with IE. The links are leading to "http://thesten.com/main/k.php?key=FETISH". It changes the category acording to the page content.
    2. Chanes your main page and search pages.
    3. Changes your host file.
    4. Downloads thefolowing files from internet:
    iedll.exe
    loader.exe
    DNSerr.exe

    I found a similar virus on spermatrix.com
    What I've done to remove teh virus:
    1. First search the regestry for "thesten" and delete all the entryes I found.
    2. Delete this 3 files I mentioned.
    3. Then downloaded this software.
    http://www.spywareinfo.com/~merijn/f...hijackthis.zip
    !!!IMPORTANT. Do not fix everything the software finds. Just the host files and if there is iedll.exe,loader.exe or DNSerr.exe runned. If you remove everything then you must reinstall it.
    <font color="#66cc00" size="-1">It's not important how big you are... the point is how big you want to be!</font>
  • goBigtime
    Confirmed User
    • Nov 2002
    • 7761

    #2
    not if you're running mozilla firebird it doesn't

    Comment

    • jeroman
      So Fucking Banned
      • Oct 2002
      • 356

      #3
      adaware pro takes care of similar stuff like this

      Comment

      • goBigtime
        Confirmed User
        • Nov 2002
        • 7761

        #4
        and while you're at it, why don't you replace that exploit prone MS outlook with mozilla thunderbird .

        Comment

        • WidowSEXplorer
          Registered User
          • Jul 2003
          • 10

          #5
          The problem is that I din't catch the virus trough the e-mail. It is a web based virus and it infects the serfers from a webpage.
          <font color="#66cc00" size="-1">It's not important how big you are... the point is how big you want to be!</font>

          Comment

          • WidowSEXplorer
            Registered User
            • Jul 2003
            • 10

            #6
            do you remember this virus ththrous popups when you have sextracker? The new one is worst because it will still your traffic. Imagine that infected surfer goes to your webpage. This virus changes the link on your page and when the surfer clicks on your page it goes to http://thesten.com or another page but not to your traders or galleries. I think this can become a serious problem for all of us.
            <font color="#66cc00" size="-1">It's not important how big you are... the point is how big you want to be!</font>

            Comment

            • buzzard
              Confirmed User
              • Aug 2002
              • 1276

              #7
              praise jebus

              Comment

              • MattO
                The O is for Oohhh
                • Feb 2003
                • 10861

                #8
                you need Mozilla Pterodactyl

                Comment

                • Spice
                  Registered User
                  • Feb 2003
                  • 83

                  #9
                  WOW, I got the same exact thing here. It scared the shit outta me at first seeing half of my links going to thesten.com. I thought that someone hacked my server. After refreshing, it went away. I think that I'd better run my adware program to make sure that it's gone. I do have Norton Net Security 2004, but sometimes when I'm looking at pages, it doesn't display all of the images, so I disable it to view them.

                  Comment

                  • Spice
                    Registered User
                    • Feb 2003
                    • 83

                    #10
                    I'd bet that the owner of that domain has something to do with it ;(

                    Comment

                    • TheViper
                      Confirmed User
                      • Mar 2003
                      • 2560

                      #11
                      iedll.exe is a nasty fucker for sure, if you remove it by hand it installs itself again after a few minutes or on boot up.

                      Comment

                      • Gemini
                        Confirmed User
                        • Jan 2001
                        • 7183

                        #12
                        Email his host and get his plug pulled and then as he moves from host to host... follow his b*tt and tell each host. lol Amazing how fast they take them down when they see it for themselves. If the host doesn't respond, step up the food chain to the upstream provider.
                        <center><a target="_blank" href="http://dev.datedollars.com/index.php?s=signup&amp;aid=535&amp;cfg=aac"><img border="0" src="http://216.130.172.224/gfy/gsig.gif" width="490" height="100"></a><br><a href="http://dev.datedollars.com/index.php?s=signup&amp;aid=535&amp;cfg=aac" target="_blank"><b><font face="Arial"><font color="#FF99FF"> Buy me away from Slavedriver Smokey!<br>It's May Sig Sweeps!<font></b></center>

                        Comment

                        • WidowSEXplorer
                          Registered User
                          • Jul 2003
                          • 10

                          #13
                          Spice

                          It can't just gone and there is no antivirus for this shit because it's "handmade". The antivirus companies does not even know about it but it will be to late when they learn about it. Spermatrix is site with about 200k traffic daily. Can you imagine howmany people get infected. Probably 100 000 everyday.
                          <font color="#66cc00" size="-1">It's not important how big you are... the point is how big you want to be!</font>

                          Comment

                          • Seb From Holland
                            Confirmed User
                            • May 2002
                            • 2747

                            #14
                            Just make your host file read only.

                            Comment

                            • jacker
                              Confirmed User
                              • Oct 2003
                              • 215

                              #15
                              My buddy got hit at home...he managed to find the files and delete them but it really messed his PC up. Thanks for the info re: cleaning the bug out.

                              Cheers
                              James
                              James Acker
                              PaySystems Corporation
                              1-866-699-9021 x2109
                              [email protected]
                              icq: 60019103

                              Comment

                              • pudcat
                                Confirmed User
                                • Mar 2003
                                • 1169

                                #16
                                Originally posted by goBigtime
                                and while you're at it, why don't you replace that exploit prone MS outlook with mozilla thunderbird .


                                while you're at it... try Linux, bsd macosx or whatever... it's amazing how little you need to be worried about viruses, crashes, the computer going super slow for no particular reason... and your work might even speed up a little
                                SUBMIT YOUR BABE GALLERIES

                                PROMOTE YOUR BLOG HERE

                                always looking for hardlinks icq #207011694

                                Thunder-Ball.net, good for hardlink exchanges

                                Comment

                                • WidowSEXplorer
                                  Registered User
                                  • Jul 2003
                                  • 10

                                  #17
                                  The problem is not in the host file and not even in my computer. The problem is with the thousands of clicks that this motherfucker will still from all of us.
                                  <font color="#66cc00" size="-1">It's not important how big you are... the point is how big you want to be!</font>

                                  Comment

                                  • loverboy
                                    When it rains, it pours
                                    • May 2003
                                    • 20609

                                    #18
                                    im well protected w/ Windows XP ICF

                                    Comment

                                    Working...