Damned script kiddies!! (virus)

[alpha]

Some little delinquent has made a virues and I've got it http://sysopt.earthweb.com/forum/frown.gif

It displays a message every time it starts up:
*(hax4r l33t version of the word microsoft)* says no today!!

PC-Cillin (POS virus scanner) doesn't find anything. I had a look in the reg for key words, but nothing.

Help would be nice http://sysopt.earthweb.com/forum/smile.gif It also shuts down the computer randomly and stuff.

[tangluva]

Damnit, I knew it would go to the wrong person and not James!

(j/k http://sysopt.earthweb.com/forum/biggrin.gif )

[alpha]

How did I get this into the wrong forum? GAG! I'm so dyslexic http://sysopt.earthweb.com/forum/wink.gif

[alpha]

Yeah, that's it! Thanks! I'll try the fix tommorrow!! Thanks http://sysopt.earthweb.com/forum/smile.gif

l8r peoples (isn't that a bit hax4r l33t w00t, though? http://sysopt.earthweb.com/forum/wink.gif)

Alpha.

[socalgal]

Moved.

Hmm, without a file/virus name, we can't search for it.

Try www.avp.com (http://www.avp.com) trial for a good scan. May be buggy if you're running W2K, but it's been a couple months so it may be fixed.

Try other trial scanners from here:
http://www.virusbtn.com/AVLinks/



[This message has been edited by socalgal (edited 10-01-2000).]

[Dave_H]

If the message reads:
"Kagou-Anti-Kro$oft says not today!"
Then its the Kak Worm.
One variant strikes on the first of the month.
Wscript.KakWorm (http://www.symantec.com/avcenter/venc/data/wscript.kakworm.html)

Here is some more instructions on removing it: http://www.symantec.com/avcenter/venc/data/wscript.kakworm.fix.html
Dave

[alpha]

Damned fix don't work!!

10minutes of manual registry editing and other stuff....

WoHoo!!! In your face virus dood!! Alpha's in the house!!!

ps - Thanks for the help http://sysopt.earthweb.com/forum/smile.gif