FUCKING VIRUS - backdoor.coreflood

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Makingcoin
    Confirmed User
    • Aug 2002
    • 8919
    #1

    FUCKING VIRUS - backdoor.coreflood

    I have been infected with backdoor.coreflood on one of my laptops. I have followed the instructions here http://securityresponse.symantec.com...coreflood.html and can't seem to get rid of this fucker. Anyone able to help me out and destroy this thing. Hit me up on icq or respond here and I will message you. 166662831


    www.MAKINGCOIN.com
    icq. 166-662-831
    "Start making large coin!"

    Daddy I Get Paid To Be A Whore - Coming Soon
    Tags: None
    • Dirty F
      Too lazy to set a custom title
      • Jul 2001
      • 59204
      #2
      Shit is getting crazy, 5 posts a day about people infected.

      Im gonna repeat myself but get Opera...at least for now it will help you avoid this shit.

      I havent been infected in quite a long time since i use it.

      They should fucking hang those fuckers by the balls who keep on spreading this shit.

        Comment

        • Makingcoin
          Confirmed User
          • Aug 2002
          • 8919
          #3
          Originally posted by Battuss
          Shit is getting crazy, 5 posts a day about people infected.

          Im gonna repeat myself but get Opera...at least for now it will help you avoid this shit.

          I havent been infected in quite a long time since i use it.

          They should fucking hang those fuckers by the balls who keep on spreading this shit.
          Not going to help me now. I have the virus already..

          www.MAKINGCOIN.com
          icq. 166-662-831
          "Start making large coin!"

          Daddy I Get Paid To Be A Whore - Coming Soon

            Comment

            • austinth
              Confirmed User
              • Jul 2002
              • 1770
              #4
              Shitty to hear this Coin. My buddy had something similar to it on his pc, and i tried cleaning his registry and removing all the files. It worked for a day then the horny bastard went surfing porn again picked up the same shit! So I did a reinstall for him and formatted his hd, everything seems to be fine now. If you can't nuke it you may have to reformat but you should be able to back up your websites, emails, favs etc. and scan them norton before you put em back on your system.

              Good luck bro, and hit me on msn when u get a chance, it's been a long time!
              Get A $25 Circuit City GIFT Card - FREE!

                Comment

                • mal
                  Confirmed User
                  • Dec 2003
                  • 1899
                  #5

                    Comment

                    • jimmyf
                      OU812
                      • Feb 2001
                      • 12651
                      #6
                      Originally posted by Battuss
                      Shit is getting crazy, 5 posts a day about people infected.

                      Im gonna repeat myself but get Opera...at least for now it will help you avoid this shit.

                      I havent been infected in quite a long time since i use it.

                      They should fucking hang those fuckers by the balls who keep on spreading this shit.
                      yep it is getting crazy.

                      and yes people you are not being very smart using IE and Outlook at this time.

                      get Opera,Mozilla, or Netscape.
                      Epic CashEpic Cash works for me
                      Solar Cash Paysite Plugin
                      Gallery of the day freesites,POTD,Gallery generator with free hosting

                        Comment

                        • Makingcoin
                          Confirmed User
                          • Aug 2002
                          • 8919
                          #7
                          Originally posted by mal


                          Thanks, that made me laugh.

                          www.MAKINGCOIN.com
                          icq. 166-662-831
                          "Start making large coin!"

                          Daddy I Get Paid To Be A Whore - Coming Soon

                            Comment

                            • Makingcoin
                              Confirmed User
                              • Aug 2002
                              • 8919
                              #8
                              How do I delete dfrgnap.dll ????

                              I try to delete this from windows/system32/ and it says it is being used by another program.


                              www.MAKINGCOIN.com
                              icq. 166-662-831
                              "Start making large coin!"

                              Daddy I Get Paid To Be A Whore - Coming Soon

                                Comment

                                • hova
                                  Traffillionaire
                                  • Jan 2002
                                  • 22430
                                  #9
                                  I have the same problem on my toilet laptop, thank god my others use Opera
                                  http://traffillions.com/

                                  Sign up and get lifetime revshare on your traffic

                                    Comment

                                    • TheDr
                                      Confirmed User
                                      • Jan 2001
                                      • 108
                                      #10
                                      wrong quote

                                      Did you boot in safe mode to delete dfrgnap.dll ?
                                      Last edited by TheDr; 07-05-2004, 04:25 PM.

                                        Comment

                                        • Makingcoin
                                          Confirmed User
                                          • Aug 2002
                                          • 8919
                                          #11
                                          Originally posted by TheDr
                                          Did you boot in safe mode ?
                                          If you are asking me, yes I booted in safe mode!

                                          www.MAKINGCOIN.com
                                          icq. 166-662-831
                                          "Start making large coin!"

                                          Daddy I Get Paid To Be A Whore - Coming Soon

                                            Comment

                                            • TheWildcard
                                              So Fucking Banned
                                              • Jun 2004
                                              • 4759
                                              #12
                                              Originally posted by hova
                                              I have the same problem on my toilet laptop, thank god my others use Opera
                                              Toilet laptop? Pimp.

                                                Comment

                                                • Mr-No
                                                  Confirmed User
                                                  • Oct 2001
                                                  • 698
                                                  #13
                                                  ctrl+alt+del, and kill the shit from task manager, then delete "dfrgnap.dll"...
                                                  Mike's Content - High Quality Exclusive/Custom Content!
                                                  Hottest Hungarian and Czech Girls
                                                  ICQ# 162531169 _-_or_-_ mike[at]mikescontent.com

                                                    Comment

                                                    • hova
                                                      Traffillionaire
                                                      • Jan 2002
                                                      • 22430
                                                      #14
                                                      Originally posted by TheWildcard
                                                      Toilet laptop? Pimp.
                                                      hehe.........you should see that one. Its not so pimp as it sounds, it weighs more then a normal desktop and the screen is the size of a phone. But it does run XP for some reason
                                                      http://traffillions.com/

                                                      Sign up and get lifetime revshare on your traffic

                                                        Comment

                                                        • austinth
                                                          Confirmed User
                                                          • Jul 2002
                                                          • 1770
                                                          #15
                                                          check your configsys there were probably things added in there to run at startup which is why it says its being used somewhere else.
                                                          Get A $25 Circuit City GIFT Card - FREE!

                                                            Comment

                                                            • badmrfrosty
                                                              Confirmed User
                                                              • May 2003
                                                              • 500
                                                              #16
                                                              This is how i would get rid of it. I tried to ICQ you but you wouldnt authorize me lol :D

                                                              1) go to this URL:

                                                              http://www.foundstone.com/index.htm?...desc/fport.htm

                                                              2) Download F-port
                                                              3) Unzip Fport
                                                              4) start > run > cmd (enter)
                                                              5) cd \f-port2.0 (or whereever you unzipped it)

                                                              Look for anything that looks out of the ordinary listening on your system, it lists port numbers and their corresponding executable files.

                                                              after you get the name of the executable that is causing your headache

                                                              6) type exit
                                                              7) click start > run > type regedit (enter)
                                                              8) click edit > find
                                                              9) type in the name of the offending executable (or dll)
                                                              10) delete the key that is making the offending virus/trojan execute at boot time.
                                                              11) reboot your PC
                                                              12) delete the offending files

                                                              go to windowsupdate.com and keep your box patched, might be a good idea to keep antivirus software up to date as well.

                                                              Hope this helps, take care.

                                                              Actually I think everyone should have FPORT, its very useful, one can find all kinds of funny daemons running on their box, my girlfriend had a rogue webserver running on PORT 5000 that was letting people control her box.

                                                              BMF

                                                                Comment

                                                                • Lykos
                                                                  Too lazy to set a custom title
                                                                  • Apr 2003
                                                                  • 31032
                                                                  #17
                                                                  Fucking viruses

                                                                    Comment

                                                                    • Rankings
                                                                      Adult SEO
                                                                      • Jan 2004
                                                                      • 10633
                                                                      #18
                                                                      great. I hate a fucking virus
                                                                      Your leader for Adult SEO Services

                                                                      19+ Years Serving the Adult/SEO Industry

                                                                      ICQ: 610-814
                                                                      Skype: xratedseo

                                                                        Comment

                                                                        Previous template Next
                                                                        Working...