Microsoft Windows Virus - April 1st attack

[Kanon]

Small question: can someone explain what "rent-a-computer-crook" means, exactly? I can't info on that, except quotes to the article en the nytimes...

 

[Lord Valumart]

ok, so i run this and it said i'm clean.

so do i scan every day for the next week or what

 

[Lord Valumart]

ok, so i run this and it said i'm clean.

so do i scan every day for the next week or what

 

[Ace of Knaves]

Will Spybot beast this worm?

 

[DarkSovereignty]

i have avast... will that detect the worm?

 

[Dark Helmet]

I am okay now but I am in need of a reformat anyway so bring it on *****

 

[Kable24]

checked 2 of my 4 pc's and all is clean. Will check the last ones later. Thanks for the little program Mal.

 

[Van Petrol]

Edit.

 

[hammy]

Happy Birthday, Malice.

 

[wiegeabo]

Malice's birthday and Cornflicker only 3 days apart. Coincidence?

 

[D-Man22]

^I think not.

 

[Daredevil_2003]

The fact that this story has the date April 1st involved is enough to make me

 

[K.B.]

If I scan my computer and win32 or any variation of it comes up, is that bad?

 

[wiegeabo]

The fact that this story has the date April 1st involved is enough to make me

If this is an April Fools joke, then they've also convinced Microsoft, various anti-virus makers, and other online publications to fall for it.


Cornflicker is out there. The reason it's set to go off April 1st is due to the virus writers obvious shot at what they call humor. Now, it could be the virus turns out to be essentially harmless, and that the joke. The writer 'got' everyone be scaring them.

Or it could turn out to be very destructive. And the virus writer still 'gets' everyone.

 

[wiegeabo]

If I scan my computer and win32 or any variation of it comes up, is that bad?

What exactly is it saying? Are you scanning with the software Malice linked to?

 

[Venom160]

Greetings all.

I want ALL users of the Windows Operating System to do something before April 1st. On April, a virus (worm to be named correctly) will actually get out to the internet and then download a payload...this is usually not good.

I want you all to be secure.

I want EVERYONE who is not sure if they are safe, to go HERE

use the like in the section that looks like this:
F-Downadup
Specific tool with heuristics for Downadup worm variants:

• ftp://ftp.f-secure.com/anti-virus/tools/beta/f-downadup.zip

Unzip it to your desktop and then run it.
This is a program to simply scan ONLY for the Conficker worm.

I want all my brothers and sisters to be safe here.

Please do this, because the unknown nature of the payload could really be nasty if too many people are still infected.

Malice

don't know if I'm doin it wrong but I clicked on this link like Malice said.

And instead of getting an install prompt I got this.

As you can see I'm mildly ******ed when it comes to computers.

 

[wiegeabo]

Try clicking on the second link in Malice's post.

It should directly download the file without going to the F-Secure page.

 

[Venom160]

tried that aswell and got the same thing.

 

[wiegeabo]

Odd. Although their shouldn't be a final slash at the end of that address in your browser. Perhaps your browser doesn't allow download from ftp sites.

Since you're in Firefox, try right-clicking the second link and choosing Save Link As... That should let you download the file.

 

[Exophagy]

So this mean that this worm might, (in theory :P ) be Skynet triggering Judgement Day?

Ok, jokes aside, those worried about not seeing the results of the scan, can do this:

Put the f-downadup.exe file in an easy to remember location, open the command line, and use DOS commands to find it and run it. that way the windows remains open, with the results. Other, maybe easier way, is to create a shortcut for the f-downadup.exe file, and before running the shortcut, open the properties dialog box, go to the second tab (Program) and uncheck 'close window when program ends' at the bottom. I think those are the correct names in the english version, since I'm using spanish windows. Also, I'm not sure, but I think it is the same in XP/Vista (if not, it's pretty similar)

You should see something like this at the end

How do I do this? I don't know much about using the command line, how do I "find it and run it"?

I tried the second method also, but when I right click on the shortcut and select properties there is no Program tab. Only tabs are general, shortcut, options, font, layout, colors and compatibility. And none of those tabs have the "close window when program ends" option.

 

[wiegeabo]

How do I do this? I don't know much about using the command prompt, how do I "find it and run it"?

I tried the second method also, but when I right click on the short cut and select properties there is no Program tab, and of the tabs that are there none of them have the "close window when program ends" option.

I'm assuming you've unzipped the file to your desktop:

1. From the Start menu, choose Run

2. Type Command and press OK. (This will open a command prompt)

3. (You should see something like C:\Documents and Settings\ComputerName) Type cd Desktop (This will change the directory to your desktop folder)

4. Type f-downadup.exe and press return (this is the program file name. It will now run in the window and display your results)

5. When finised, type exit to close the window

 

[Venom160]

Odd. Although their shouldn't be a final slash at the end of that address in your browser. Perhaps your browser doesn't allow download from ftp sites.

Since you're in Firefox, try right-clicking the second link and choosing Save Link As... That should let you download the file.

just tried that and it came up with a box saying "f-downadup.zip could not be saved, because the source file could not be read.

Try again later, or contact the server administrator."

 

[wiegeabo]

That's weird because I just downloaded it again.

Out of curiosity, will your browser open microsoft.com, symantec.com, or mcafee.com?

 

[Venom160]

yep yep. Overall my pc seems to be running fine. I just figured I'd be safe than sorry.

 

[Exophagy]

I'm assuming you've unzipped the file to your desktop:

1. From the Start menu, choose Run

2. Type Command and press OK. (This will open a command prompt)

3. (You should see something like C:\Documents and Settings\ComputerName) Type cd Desktop (This will change the directory to your desktop folder)

4. Type f-downadup.exe and press return (this is the program file name. It will now run in the window and display your results)

5. When finised, type exit to close the window

Thank you very much. Now I know I'm clean