Penis.exe - GoFuckYourself.com

Goose · 03-28-2004, 04:17 AM

My damn PC has a fucking virus, no program is able to delete it. I found the data by myself. Deep down in my windows folder: Penis.exe. LOL

Poo-Chee · 03-28-2004, 04:18 AM

what does it do?

Goose · 03-28-2004, 04:19 AM

i actually have no clue...nothing yet. ;) thats why I just ignore it

The Sex Pusher · 03-28-2004, 04:20 AM

Quote:

Originally posted by Poo-Chee
what does it do?

Fucks him every 6 hours for about 5 minutes. Then goes back to sleep

Repetitive Monkey · 03-28-2004, 04:20 AM

Quote:

Originally posted by Poo-Chee
what does it do?

It shoots loads of data at the kernel.

hova · 03-28-2004, 04:20 AM

format c:

The Sex Pusher · 03-28-2004, 04:21 AM

http://www.tek-tips.com/gviewthread..../83/qid/766680 VIRUS TROJAN GAOBOT (Penis.exe)

I have encountered a virus on three systems in our office it appears to be a new varation of the Gaobot blaster.exe trojan. Its called Penis.exe. I was able to finally get two of the three back up by deleting the files manually and then deleting the registry keys as well. However the third system when booting up after login takes approx 30 mins to get a desktop and after that any program you try to open takes approx 10 mins or longer to work. Any suggestions on something I am missing? Has anyone else encountered this virus? Sad part is after working for over 5 hours with Symantec they were clueless to this new varation and unable to offer any real assistance other than reformat harddrive. Thanks for the help.

Goose · 03-28-2004, 04:22 AM

yeah what it propably does is spilling on my MOTHERboard

Goose · 03-28-2004, 04:25 AM

Quote:

Originally posted by The Sex Pusher
http://www.tek-tips.com/gviewthread..../83/qid/766680 VIRUS TROJAN GAOBOT (Penis.exe)

I have encountered a virus on three systems in our office it appears to be a new varation of the Gaobot blaster.exe trojan. Its called Penis.exe. I was able to finally get two of the three back up by deleting the files manually and then deleting the registry keys as well. However the third system when booting up after login takes approx 30 mins to get a desktop and after that any program you try to open takes approx 10 mins or longer to work. Any suggestions on something I am missing? Has anyone else encountered this virus? Sad part is after working for over 5 hours with Symantec they were clueless to this new varation and unable to offer any real assistance other than reformat harddrive. Thanks for the help.

shit seems to be serious...Im sorry I cant help yet. These infos are new to me. The problem is that i cant delete in manually coz windows says, that this data is currently in use.
Have you tried to boot your sys in DOS and delete it from there? That might work. Good luck anyway

Poo-Chee · 03-28-2004, 04:26 AM

Quote:

Originally posted by Repetitive Monkey
It shoots loads of data at the kernel.

haha, good one

The Sex Pusher · 03-28-2004, 04:26 AM

Readers to the Rescue / Windows / Genuine Post - Pen...

7 replies on 1 page. Most recent reply: Mar 19, 2004 10:36 PM by blue
Topic: Genuine Post - Penis.exe
[posted on: Mar 19, 2004 1:25 PM by paddy cocks Reply
Everytime my system boots to desk top I get a dialogue saying "windows cannot find penis.exe

LOL windows cannot find penis.. lol

The Sex Pusher · 03-28-2004, 04:28 AM

Quote:

Originally posted by Goose

shit seems to be serious...Im sorry I cant help yet. These infos are new to me. The problem is that i cant delete in manually coz windows says, that this data is currently in use.
Have you tried to boot your sys in DOS and delete it from there? That might work. Good luck anyway

That was a quote from google

i dont get virus's

But what you have is prob whats left of the blaster virus.. On the page i sent it has a removal tool.

Goose · 03-28-2004, 04:30 AM

a cool...do you still have the direct link to the tool?

The Sex Pusher · 03-28-2004, 04:30 AM

or just go into your registry ( run regedit ) and search for values that contain the word penis.

AlienQ - BANNED FOR LIFE · 03-28-2004, 04:32 AM

Sys Error Type Suck It
You must restart you PC to suck more.
OK.

The Sex Pusher · 03-28-2004, 04:32 AM

Quote:

Originally posted by Goose
a cool...do you still have the direct link to the tool?

http://securityresponse.symantec.com...r/FixBlast.exe

but read this page first or you could ruin your internet protocol

http://securityresponse.symantec.com...oval.tool.html

Goose · 03-28-2004, 04:32 AM

yep im already doing that...but thx anyway...Ill handle it manually ;)

Poo-Chee · 03-28-2004, 04:32 AM

Signs

The Sex Pusher · 03-28-2004, 04:36 AM

could be this also , but as the dates are closer to the other fellow i would think its blaster..

W32/Cissi-B is a worm which attempts to spread by emailing itself via SMTP and by copying itself to network shares with weak passwords. The worm allows unauthorised remote access to the computer via IRC channels.
The worm copies itself to the Windows system folder as PENIS.EXE and changes the [boot] field within SYSTEM.INI (or WIN.INI under MS Win NT/2000/XP) to run itself on system restart. Under Windows NT-based systems the worm may change the following entry in the registry to run the worm on system restart:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell

W32/Cissi-B may attempt to email itself to email addresses gleaned from files on the user's hard disk.

W32/Cissi-B attempts to copy itself to the Startup folder on remote shared computers as !IMPORTANT!.EXE or SETUP.EXE.

AlienQ - BANNED FOR LIFE · 03-28-2004, 04:40 AM

FUck I hate the ones that make ya fix the sys file...
That really sucks...

Goose · 03-28-2004, 04:42 AM

Quote:

Originally posted by AlienQ
FUck I hate the ones that make ya fix the sys file...
That really sucks...

you got it. Anyway... I think i got rid of it...
thanks 4 your help Sex Pusher!

Repetitive Monkey · 03-28-2004, 04:47 AM

Smokey, would you mind showing me your software for an improved GFY whoring experience? I saw you mentioned it in the sig forum, and I am interested in it. If need be I'll sell you my sig.

Goose · 03-28-2004, 04:48 AM

Quote:

Everytime my system boots to desk top I get a dialogue saying "windows cannot find penis.exe

LOL windows cannot find penis.. lol [/B]

the reason probably is, that you deleted the file penis.exe, but not its entry to the registry. So just go to regedit and search this file. GL

03-28-2004, 04:17 AM	#1
Goose Confirmed User Join Date: Mar 2004 Location: --------Europe------- Posts: 5,725	Penis.exe My damn PC has a fucking virus, no program is able to delete it. I found the data by myself. Deep down in my windows folder: Penis.exe. LOL

03-28-2004, 04:20 AM	#6
hova Traffillionaire Industry Role: Join Date: Jan 2002 Location: ICQ:209371571 Posts: 22,430	format c: __________________ http://traffillions.com/ Sign up and get lifetime revshare on your traffic

03-28-2004, 04:32 AM	#15
AlienQ - BANNED FOR LIFE best designer on GFY Join Date: Mar 2003 Location: IALIEN.COM - High Definition Video and Photographic Productions -ICQ 78943384 Posts: 30,307	Sys Error Type Suck It You must restart you PC to suck more. OK. __________________ NAKED HOSTING FTW!11 I'm On The INSANE PLAN $9.95/mo! \| The Alien Blog Adult News Worth Reading Updated Daily \| Content For Sale! 641 PICS 216 MINUTES OF VIDEO $350.00 \|ICQ: 78943384 \|

03-28-2004, 04:40 AM	#20
AlienQ - BANNED FOR LIFE best designer on GFY Join Date: Mar 2003 Location: IALIEN.COM - High Definition Video and Photographic Productions -ICQ 78943384 Posts: 30,307	FUck I hate the ones that make ya fix the sys file... That really sucks... __________________ NAKED HOSTING FTW!11 I'm On The INSANE PLAN $9.95/mo! \| The Alien Blog Adult News Worth Reading Updated Daily \| Content For Sale! 641 PICS 216 MINUTES OF VIDEO $350.00 \|ICQ: 78943384 \|

03-28-2004, 04:18 AM	#2
Poo-Chee So Fucking Banned Join Date: Sep 2003 Location: Rotterdam Posts: 3,560	what does it do?

03-28-2004, 04:19 AM	#3
Goose Confirmed User Join Date: Mar 2004 Location: --------Europe------- Posts: 5,725	i actually have no clue...nothing yet. ;) thats why I just ignore it

03-28-2004, 04:21 AM	#7
The Sex Pusher So Fucking Banned Join Date: Mar 2004 Posts: 431	http://www.tek-tips.com/gviewthread..../83/qid/766680 VIRUS TROJAN GAOBOT (Penis.exe) I have encountered a virus on three systems in our office it appears to be a new varation of the Gaobot blaster.exe trojan. Its called Penis.exe. I was able to finally get two of the three back up by deleting the files manually and then deleting the registry keys as well. However the third system when booting up after login takes approx 30 mins to get a desktop and after that any program you try to open takes approx 10 mins or longer to work. Any suggestions on something I am missing? Has anyone else encountered this virus? Sad part is after working for over 5 hours with Symantec they were clueless to this new varation and unable to offer any real assistance other than reformat harddrive. Thanks for the help.

03-28-2004, 04:22 AM	#8
Goose Confirmed User Join Date: Mar 2004 Location: --------Europe------- Posts: 5,725	yeah what it propably does is spilling on my MOTHERboard

03-28-2004, 04:26 AM	#11
The Sex Pusher So Fucking Banned Join Date: Mar 2004 Posts: 431	Readers to the Rescue / Windows / Genuine Post - Pen... 7 replies on 1 page. Most recent reply: Mar 19, 2004 10:36 PM by blue Topic: Genuine Post - Penis.exe [posted on: Mar 19, 2004 1:25 PM by paddy cocks Reply Everytime my system boots to desk top I get a dialogue saying "windows cannot find penis.exe LOL windows cannot find penis.. lol

03-28-2004, 04:30 AM	#13
Goose Confirmed User Join Date: Mar 2004 Location: --------Europe------- Posts: 5,725	a cool...do you still have the direct link to the tool?

03-28-2004, 04:36 AM	#19
The Sex Pusher So Fucking Banned Join Date: Mar 2004 Posts: 431	could be this also , but as the dates are closer to the other fellow i would think its blaster.. W32/Cissi-B is a worm which attempts to spread by emailing itself via SMTP and by copying itself to network shares with weak passwords. The worm allows unauthorised remote access to the computer via IRC channels. The worm copies itself to the Windows system folder as PENIS.EXE and changes the [boot] field within SYSTEM.INI (or WIN.INI under MS Win NT/2000/XP) to run itself on system restart. Under Windows NT-based systems the worm may change the following entry in the registry to run the worm on system restart: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell W32/Cissi-B may attempt to email itself to email addresses gleaned from files on the user's hard disk. W32/Cissi-B attempts to copy itself to the Startup folder on remote shared computers as !IMPORTANT!.EXE or SETUP.EXE.

03-28-2004, 04:47 AM	#22
Repetitive Monkey Confirmed User Join Date: Feb 2004 Posts: 3,505	Smokey, would you mind showing me your software for an improved GFY whoring experience? I saw you mentioned it in the sig forum, and I am interested in it. If need be I'll sell you my sig.