FUCKING VIRUS - backdoor.coreflood - GoFuckYourself.com

Makingcoin · 07-05-2004, 04:55 PM

I have been infected with backdoor.coreflood on one of my laptops. I have followed the instructions here http://securityresponse.symantec.com...coreflood.html and can't seem to get rid of this fucker. Anyone able to help me out and destroy this thing. Hit me up on icq or respond here and I will message you. 166662831

Dirty F · 07-05-2004, 04:57 PM

Shit is getting crazy, 5 posts a day about people infected.

Im gonna repeat myself but get Opera...at least for now it will help you avoid this shit.

I havent been infected in quite a long time since i use it.

They should fucking hang those fuckers by the balls who keep on spreading this shit.

Makingcoin · 07-05-2004, 04:58 PM

Quote:

Originally posted by Battuss
Shit is getting crazy, 5 posts a day about people infected.

Im gonna repeat myself but get Opera...at least for now it will help you avoid this shit.

I havent been infected in quite a long time since i use it.

They should fucking hang those fuckers by the balls who keep on spreading this shit.

Not going to help me now. I have the virus already..

austinth · 07-05-2004, 05:01 PM

Shitty to hear this Coin. My buddy had something similar to it on his pc, and i tried cleaning his registry and removing all the files. It worked for a day then the horny bastard went surfing porn again picked up the same shit! So I did a reinstall for him and formatted his hd, everything seems to be fine now. If you can't nuke it you may have to reformat but you should be able to back up your websites, emails, favs etc. and scan them norton before you put em back on your system.

Good luck bro, and hit me on msn when u get a chance, it's been a long time!

mal · 07-05-2004, 05:06 PM

jimmyf · 07-05-2004, 05:08 PM

Quote:

Originally posted by Battuss
Shit is getting crazy, 5 posts a day about people infected.

Im gonna repeat myself but get Opera...at least for now it will help you avoid this shit.

I havent been infected in quite a long time since i use it.

They should fucking hang those fuckers by the balls who keep on spreading this shit.

yep it is getting crazy.

and yes people you are not being very smart using IE and Outlook at this time.

get Opera,Mozilla, or Netscape.

Makingcoin · 07-05-2004, 05:11 PM

Quote:

Originally posted by mal

Thanks, that made me laugh.

Makingcoin · 07-05-2004, 05:17 PM

How do I delete dfrgnap.dll ????

I try to delete this from windows/system32/ and it says it is being used by another program.

hova · 07-05-2004, 05:21 PM

I have the same problem on my toilet laptop, thank god my others use Opera

TheDr · 07-05-2004, 05:23 PM

wrong quote

Did you boot in safe mode to delete dfrgnap.dll ?

Makingcoin · 07-05-2004, 05:25 PM

Quote:

Originally posted by TheDr
Did you boot in safe mode ?

If you are asking me, yes I booted in safe mode!

TheWildcard · 07-05-2004, 05:29 PM

Quote:

Originally posted by hova
I have the same problem on my toilet laptop, thank god my others use Opera

Toilet laptop? Pimp.

Mr-No · 07-05-2004, 05:30 PM

ctrl+alt+del, and kill the shit from task manager, then delete "dfrgnap.dll"...

hova · 07-05-2004, 05:36 PM

Quote:

Originally posted by TheWildcard
Toilet laptop? Pimp.

hehe.........you should see that one. Its not so pimp as it sounds, it weighs more then a normal desktop and the screen is the size of a phone. But it does run XP for some reason

austinth · 07-05-2004, 07:04 PM

check your configsys there were probably things added in there to run at startup which is why it says its being used somewhere else.

badmrfrosty · 07-05-2004, 07:18 PM

This is how i would get rid of it. I tried to ICQ you but you wouldnt authorize me lol :D

1) go to this URL:

http://www.foundstone.com/index.htm?...desc/fport.htm

2) Download F-port
3) Unzip Fport
4) start > run > cmd (enter)
5) cd \f-port2.0 (or whereever you unzipped it)

Look for anything that looks out of the ordinary listening on your system, it lists port numbers and their corresponding executable files.

after you get the name of the executable that is causing your headache

6) type exit
7) click start > run > type regedit (enter)
8) click edit > find
9) type in the name of the offending executable (or dll)
10) delete the key that is making the offending virus/trojan execute at boot time.
11) reboot your PC
12) delete the offending files

go to windowsupdate.com and keep your box patched, might be a good idea to keep antivirus software up to date as well.

Hope this helps, take care.

Actually I think everyone should have FPORT, its very useful, one can find all kinds of funny daemons running on their box, my girlfriend had a rogue webserver running on PORT 5000 that was letting people control her box.

BMF

Lykos · 07-05-2004, 08:11 PM

Fucking viruses

Rankings · 07-05-2004, 08:12 PM

great. I hate a fucking virus

07-05-2004, 04:55 PM	#1
Makingcoin Confirmed User Join Date: Aug 2002 Location: The Ditch Posts: 8,919	FUCKING VIRUS - backdoor.coreflood I have been infected with backdoor.coreflood on one of my laptops. I have followed the instructions here http://securityresponse.symantec.com...coreflood.html and can't seem to get rid of this fucker. Anyone able to help me out and destroy this thing. Hit me up on icq or respond here and I will message you. 166662831 __________________ www.MAKINGCOIN.com icq. 166-662-831 "Start making large coin!" Daddy I Get Paid To Be A Whore - Coming Soon

07-05-2004, 05:01 PM	#4
austinth Confirmed User Join Date: Jul 2002 Location: Fantasy Island Posts: 1,770	Shitty to hear this Coin. My buddy had something similar to it on his pc, and i tried cleaning his registry and removing all the files. It worked for a day then the horny bastard went surfing porn again picked up the same shit! So I did a reinstall for him and formatted his hd, everything seems to be fine now. If you can't nuke it you may have to reformat but you should be able to back up your websites, emails, favs etc. and scan them norton before you put em back on your system. Good luck bro, and hit me on msn when u get a chance, it's been a long time! __________________ Get A $25 Circuit City GIFT Card - *FREE*!

07-05-2004, 05:17 PM	#8
Makingcoin Confirmed User Join Date: Aug 2002 Location: The Ditch Posts: 8,919	How do I delete dfrgnap.dll ???? I try to delete this from windows/system32/ and it says it is being used by another program. __________________ www.MAKINGCOIN.com icq. 166-662-831 "Start making large coin!" Daddy I Get Paid To Be A Whore - Coming Soon

07-05-2004, 05:21 PM	#9
hova Traffillionaire Industry Role: Join Date: Jan 2002 Location: ICQ:209371571 Posts: 22,430	I have the same problem on my toilet laptop, thank god my others use Opera __________________ http://traffillions.com/ Sign up and get lifetime revshare on your traffic

07-05-2004, 05:23 PM	#10
TheDr Confirmed User Join Date: Jan 2001 Location: CO, USA Posts: 108	wrong quote Did you boot in safe mode to delete dfrgnap.dll ? Last edited by TheDr; 07-05-2004 at 05:25 PM..

07-05-2004, 04:57 PM	#2
Dirty F Too lazy to set a custom title Industry Role: Join Date: Jul 2001 Posts: 59,204	Shit is getting crazy, 5 posts a day about people infected. Im gonna repeat myself but get Opera...at least for now it will help you avoid this shit. I havent been infected in quite a long time since i use it. They should fucking hang those fuckers by the balls who keep on spreading this shit.

07-05-2004, 05:06 PM	#5
mal Confirmed User Join Date: Dec 2003 Posts: 1,899

07-05-2004, 05:30 PM	#13
Mr-No Confirmed User Join Date: Oct 2001 Location: Budapest, Hungary Posts: 698	ctrl+alt+del, and kill the shit from task manager, then delete "dfrgnap.dll"... __________________ Mike's Content - High Quality Exclusive/Custom Content! Hottest Hungarian and Czech Girls ICQ# 162531169 _-_or_-_ mike[at]mikescontent.com

07-05-2004, 07:04 PM	#15
austinth Confirmed User Join Date: Jul 2002 Location: Fantasy Island Posts: 1,770	check your configsys there were probably things added in there to run at startup which is why it says its being used somewhere else. __________________ Get A $25 Circuit City GIFT Card - *FREE*!

07-05-2004, 07:18 PM	#16
badmrfrosty Confirmed User Join Date: May 2003 Posts: 500	This is how i would get rid of it. I tried to ICQ you but you wouldnt authorize me lol :D 1) go to this URL: http://www.foundstone.com/index.htm?...desc/fport.htm 2) Download F-port 3) Unzip Fport 4) start > run > cmd (enter) 5) cd \f-port2.0 (or whereever you unzipped it) Look for anything that looks out of the ordinary listening on your system, it lists port numbers and their corresponding executable files. after you get the name of the executable that is causing your headache 6) type exit 7) click start > run > type regedit (enter) 8) click edit > find 9) type in the name of the offending executable (or dll) 10) delete the key that is making the offending virus/trojan execute at boot time. 11) reboot your PC 12) delete the offending files go to windowsupdate.com and keep your box patched, might be a good idea to keep antivirus software up to date as well. Hope this helps, take care. Actually I think everyone should have FPORT, its very useful, one can find all kinds of funny daemons running on their box, my girlfriend had a rogue webserver running on PORT 5000 that was letting people control her box. BMF

07-05-2004, 08:11 PM	#17
Lykos Too lazy to set a custom title Industry Role: Join Date: Apr 2003 Location: World Posts: 31,027	Fucking viruses __________________

07-05-2004, 08:12 PM	#18
Rankings Adult SEO Industry Role: Join Date: Jan 2004 Location: A cat with three legs cannot bury shit in a frozen pond. In addition to that, can you cry underwater? Posts: 10,633	great. I hate a fucking virus __________________ Your leader for Adult SEO Services 19+ Years Serving the Adult/SEO Industry ICQ: 610-814 Skype: xratedseo