if u encounter this during msn chat, do not open it !;(
chia lak.. wat should i do ? :think:
norton actually deleted it but seems like i cannot kill the worm
chia lak.. wat should i do ? :think:
norton actually deleted it but seems like i cannot kill the worm
a worm program usually unpack another program for keeping it alive.
For instance, worm1.exe unpack wormClone.exe..and will usually write a registry setting to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run..by adding a key to this registry, they will be able to re-run themselves on every next boot..
worm1.exe will usually be the one creating havoc, and yet monitoring whether wormClone.exe is started..
wormClone.exe is usually monitoring worm1.exe started a not, if not it will try starting it, if fail to start it will unpack another worm1.exe and start it..
some worm programs even check the availabilty of registry keys to make sure they continue to live on the next boot..
how to remove this worm ? :cry:
second attempt of attack again !
this time i just close the chat window. It says something like "does this photo look nice on myspace "
clearly, the virus is spreading fast via msn chats :sweat:
if everything fail, do a system restore to the time before you got it... most of the time it works on suchs worms/virus... etcsecond attempt of attack again !
this time i just close the chat window. It says something like "does this photo look nice on myspace "
clearly, the virus is spreading fast via msn chats :sweat:
a worm program usually unpack another program for keeping it alive.
For instance, worm1.exe unpack wormClone.exe..and will usually write a registry setting to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run..by adding a key to this registry, they will be able to re-run themselves on every next boot..
worm1.exe will usually be the one creating havoc, and yet monitoring whether wormClone.exe is started..
wormClone.exe is usually monitoring worm1.exe started a not, if not it will try starting it, if fail to start it will unpack another worm1.exe and start it..
some worm programs even check the availabilty of registry keys to make sure they continue to live on the next boot..