ARGH!!!! I think i just unleashed a virus in my system!!!!

[Wiruz]

I got a mail from a friend, with an attachment called "Loveletter_for_you.txt.pif"

And the relly funny part is i that i started it...

Isn't the loveletter virus supposed to end with .vbs?

I'm scanning for viruses right now, but my Norton Antivirus haven't been updated for a while... definitions: 31-07-00

Can anybody tell me what is going to happen?

"I'm so scared rigt now" - Blairwitch..

~Wiruz, The Frightened Digital Hippie

[blind to truth]

Sounds to be a virus. You know the drill. Close unknown programs. Check regrestry, check WIN.INI, check StartUp. I'll ask what it is in my 'circle'. Hopefully not anything too bad.

[Wiruz]

after running msconfig - i found something suspicious:
SystemBackup - C:\Windows\MTX_.exe

[Wiruz]

update:
I've scanned using the newest McAffee on tucows, no viruses found.
After disabling the system backup thing, i've been unable to enter any forums... (right now there's a "Illegal Action" program window hangin in the top of my desktop - as soon as i press close, it closes Iexplore.

It causes a Stack-error in winsock32.dll

What is going on? - What are the typical effects og the loveletter virus?

I'll try enabling the wierd program again, to see if this fixes the problem with Iexplore everytime i enter a post in a forum
(not just this forum, but also a danish one which too uses UBB)

~Wiruz, A Terrified Digital Hippie

[Wiruz]

This is to wierd...

Everytime i open a post in a forum, my iexplore crashes...

The only changes i have made to my system right before this problem started occuring, was running the "love_letter_for_you.txt.pif"
Then i scanned with norton antivirus - which didn't find anything so i downloaded the newest McAffee on tucows.
The installation was incompatible with the norton i had installed, so i allowed McAffee to uninstall norton.
It removed some shared files, which i allowed it to do.

Then the forum bug started.
Now i have reinstalled norton, uninstalled McAffee, but the bug is still there.

I'm puzzled to say the least...

Now i'll probably have to reinstall everything first thing tomorrow.

*sigh*

[BFlurie]

http://groups.yahoo.com/group/carib-gis-users/message/264

[Wiruz]

After reading the description, i'm 100% sure that i'm infected - it messes with Wsock32 - I'll try to remove it... Thanx!

[Darvocet]

That looks like the w95.mtx virus.
Check out http://www.mcafee.com for info on it and instructions on it's removal.

[socalgal]

Bummer, Wiruz http://sysopt.earthweb.com/forum/frown.gif

http://www.pchell.com/virus/mtx.shtml

http://service1.symantec.com/sarc/sarc.nsf/html/W95.MTX.html

Good luck!

[zskillz]

just for future reference... most times that something is named blah.TXT.something don't open it those are almost always trouble. the reason the .TXT is there is just to trick the eye into thinking that it is only a text file...

crappy luck man.
sorry
-Z

[ThiemeMD]

Man, I hate when that happens... before you hose your system, you might try the free online scanner/cleaner at:
http://housecall.antivirus.com/

Trend Micro might not be the most well known virus scanner, but it has helped me out.

Good Luck!
ThiemeMD

[Wiruz]

Hi! - just peaking in for a little update...

I just formatted my c:, and the first thing i installed was naturally my internet connection (It's so easy with DSL... just configure the NIC to default settings, and off i go)

It was the w95.mtx i had - And none of the virus programs i used (McAffee, Norton - both updated) could clean it, since it had modified my wsock32.dll...

As i am writing this, im running in 640x480x8bpp@60 hertz - I'm downloading the newest drivers for my Marvel G400 as i write.

Luckily i am prepared for things like this, but it pissed me off, that i could be so stupid/curious (that .pif extension puzzled me - and then i accidentally double clicked it)

I'll be running at full speed in a matter of an hour or so.

The good thing about all this, is that now i can rebuild my windows from scratch, with all the newest drivers.

I'll get my cow munching as soon as i get my Graphics fixed.

~Wiruz, The Digital Hippie

[voogru]

that sucks http://sysopt.earthweb.com/forum/frown.gif

you may want too watch out for files like this: prettylady.jpg.exe i got one like that once and i regretted it 4 sure....

-voogru