AOL virus

[ali1]

Hello.
Someone I know has caught a virus through AOL.Here's what he wrote to me:

I clicked a link on somebody's AIM profile and it gave me a virus, and i got rid of it. But the link that i clicked on invaded my screen name and whoever clicks it gets the virus too. I uninstalled AIM and then installed it back, and i even got a new AIM screen name, but after a couple days of having the new screen name it invaded this one too. What is this, and what do i do?? please email me back and explain something to me.


I think she's infected with AOL.Trojan :
http://securityresponse.symantec.com/avcenter/venc/data/aol.trojan.html

Does anyone have any suggestions as of what she should do to remove the virus?

[Stoned_on_Coke]

arent you a virus expert that writes tutorials about virii well mister you have a job there remove it by yourself with out anyhelp

[WAnKeR]

I have a few friends that 'bysteriously' got that like in there profile...is it the one that says ' Woahh...Look What I Found!'?

I dont know what it is or where it originated...but ill look into it and report back to you

[White_Eskimo]

I have a few friends that 'bysteriously' got that like in there profile...is it the one that says ' Woahh...Look What I Found!'?

I wrote a tutorial about how to remove the virus/spyware...here is the link to it:
http://www.antionline.com/showthread.php?s=&threadid=251135&highlight=realphx

[ali1]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=252305#post699376) by Stoned_on_Coke
arent you a virus expert that writes tutorials about virii well mister you have a job there remove it by yourself with out anyhelp

I never said I am a virus expert.Besides,a smart person always seeks help from people who are smarter than him..... :D

[!mitationRust]

Source Google
http://forums.techguy.org/t181265/s86fac7e3bc449754a12fdfe3b9ed5770.html
Source Google
http://rcc.bgsu.edu/faq/FixMessageTrojans.htm
Source Google
http://www.etarq.com/adware-remove.html
Source Google
http://www.computing.net/security/wwwboard/forum/7858.html
Source Google
http://www.computing.net/security/wwwboard/forum/7795.html
Source Google
http://www.yale.edu/cas/faqs/realphx.html
Source Google
http://john.homsar.com/archives/000237.html
Source Google
http://aol.crack.cd/AOL_Instant_Messenger_AIM_Ads_Removal_By_ReaLIsTy.html
Source Google
http://www.antivirus.vt.edu/alerts/downloader.mscache.asp
Source Google
http://www.sarc.com/avcenter/venc/data/downloader.mscache.html
Source Google
http://www.etplanet.com/download/aim.shtm
***************************************
SOFTWARE
http://download.com.com/3000-2144-10214379.html?tag=pop
Source Google
http://spybot.safer-networking.de/index.php?lang=en&page=download
Source Google

Need we say more but www.google.com / www.yahoo.com / www.Altavista.com

[Cybr1d]

dude...you just wrote a whole "tutorial" about a virus...I guess you suddenly forgot...anyways, here's the info you need:

http://www.imchaos.com/alert.asp

Do NOT click on links that say something like "whoaa look at what i found click here" or "I can't believe I found %n's Picture"

There appears to be a new virus/worm/spyware that is spreading via AIM profile links.

Apparently, malicious code is being placed on computer systems when victims visit either realphx.com or talkstocks.net (there may also be other domains).

This code is executed either when a visitor OKs at the prompt or automatically if the visitor has not patched Internet Explorer for known vulnerabilities (see Windows Update to patch your system).

Once the victim has been infected, their AIM profile will be changed to reflect only a link to one of the above mentioned sites with the text description as "Whoaa...look at what I found, click here" (there may also be other text descriptions). If the victim attempts to reset their profile, the link will reappear after a reboot or restart of AIM.

Due to variations of the virus/worm/spyware it may take a little work to completely clean it from your system.

Below are some links to removal tools we found (but did not test) followed by some manual instructions that were posted on other sites:

Removal tools
http://j.wftp.org
http://digitalmatter.net/index.php
http://rcc.bgsu.edu/faq/FixMessageTrojans.htm

Manual Removal Instructions
http://www.ncsu.edu/resnet/pages/security/realphx.php
http://j.wftp.org


BTW...seriosly man...i think you're a joke. First you know how to writte a tutorial about a virus and then you dont kno what the deal is with a virus that you got...c'mon...get real.

[Cybr1d]

http://www.antionline.com/showthread.php?s=&threadid=252309
http://www.antionline.com/showthread.php?s=&threadid=251998
http://www.antionline.com/showthread.php?s=&threadid=251955

These are your tutorials. You're tryin to tell us that you wrotte a whole tutorial on MSBlaster worm, and how to remove it....and you wrote a whole other tutorial on how to make my computer "immortal" and keep it safe from viruses and such...then then you went on and wrote another tutorial on NTFS ADS viruses.....but suddely you cannot get rid of a silly little malicious code in AIM...
Look, normaly I dont give a shiz about other people's businesses and what they post. That is until you try to take us for fools. You've got 41 posts and 3 tutorials. most of those posts were responses to your tutorials. Here's the deal kid...making tutorials is not going to get you APs...you have to earn them. Coming up with "copied" tutorials is even worse. There's a good reason why you have so many negative antipoints and continuing in this path will get you banned. Even if you think you can come up with a new nickname and rejoin AO...the same thing will happen if you dont learn to be original.

My 2 cent. Many of you might disagree but this is just the way I feel about it.


http://www.antionline.com/showthread.php?s=&threadid=251824&perpage=10&highlight=aim%20virus&pagenumber=2
Thats the link that was posted about the same topic. A little research would have gotten you the answers. a simple search on google with "AIM VIRUS" in the search bar came up with this result:http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=AIM+Virus

[mandraketux]

Let this be a lesson. To all of the people readnig this, if you use ANY kind of online service, and or go online at all;

QUIT ****ING CLICKING ON SHIT THAT YOU AREN'T SURE OF!

Damn. that felt nice, like a cool mountain rain. and the messege is seriouse. dont be a jack ass and click on shit in people's profiles, and dont be a shit head and click on everything. shit happens when you click on shit, so do the right thing, dont click it!

EDIT: i came up with a song that makes me think of what your jack ass friend was thinking:

when a link is in someones profile YOU MUST CLICK IT!
when i see a pop up add YOU MUST CLICK IT
when im acting like a nad YOU MUST CLICK IT
NOW CLICK IT, CLICK IT GOOD! WOOT!

when pron pops up on your screen YOU MUST CLICK IT
when your surfin through the web and you see a link YOU MUST CLICK IT
*whooo tish* :eek:
CLICK IT GOOD.
when your surfin http://www.****MyPc.com
and a pop up comes on your screen saying delete my files,
YOU MUST CLICK IT!
when mandraketux whips out his nuts
YOU MUST LICK IT!
:D

[MemorY]

making tutorials is not going to get you APs...you have to earn them.

Yes it will.

[Cybr1d]

ROFL @ mandraketux and Memory's avatar....

Ok...phew...lol...funny...anyways... Let me correct myself. Making "Unoriginal" Tutorials will not get you APs.

[mandraketux]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=252305#post699428) by Cybr1d
ROFL @ mandraketux and Memory's avatar....

Ok...phew...lol...funny...anyways... Let me correct myself. Making "Unoriginal" Tutorials will not get you APs.

whats so funny about a snowman you weirdo? and unoriginal tuitorials will get you all the points you could ever want. all you have to do is lick a lil AP whore dick.

[Cybr1d]

I was laughin at your comment and memory's avatar :)...i'm sorry but your comment was a bit funny

[mandraketux]

I edited it. Go reread it, its funnier now.

[Cybr1d]

hey memory...are mods allowed in your CS clan? such as FUsepack

[Cybr1d]

Hey man...how do I donate ...lol :) and how do I post to a topic without creating a new one...:) lol need some help here

[MemorY]

First, don't double post at AO.

how you reply on our site? Above every post you have a "reply" button. I'm not sure if mods are allowed, you'll have to ask valhallen that, or cheyenne1212 since he's responisble for the server. Hm, the link on http://www.hostultra.com/~cheyenne1212/ to donate doesn't work, i'll have to PM cheyenne1212 and ask him. Tx for the interest in our clan :)

[!mitationRust]

By Cybr1d
Here's the deal kid...making tutorials is not going to get you APs...you have to earn them.
You can allways donate money to the !mitationRust foundation and buy yourself a AntiPoint.

http://paypal.com/

Pls download after donation you must click it!

[Cybr1d]

LOL...btw..i'm a pretty good player. Been in the top 5 in quite a few servers. If you guys need anybody during clan-battles i'm up for it, usually during night time eastern time. I'll put my AIm on the site.

[White_Eskimo]

You can allways donate money to the !mitationRust foundation and buy yourself a AntiPoint.

HAHAHAHA. lol that is the funniest thing i have herd all day...people trying to sell their APs. lol now thats just bad :) I would give you a green, but i know you would sell it to someone else so...nah just playing lol that was very funny sorry for this lame post, just thought it was funny :)

[ali1]

CyberId,
I think you must be having some sort of misunderstanding about my tutorials.They are not unoriginal.And I haven't copied them from anywhere.I wrote them myself.As for the thing that I just wrote a tutorial and now I'm asking for help thing,well I am constantly being told that I should post useful questions.And I just thought I should share one of the cases I receive every day with you.Still if I've done anything wrong then I'm sorry :)

[Und3ertak3r]

ali1,

Seems like a case of bad Karma... Something how you come across.

You have recieved some bloody good advice from a couple in this thread...

If you wanted to start a descussion on the AOL virii, why did you post it as a help request?
You posted part of your own answer in your first post.. If the information there was not good why didn you say so? You are copping a bashing because your posts are not meshing..
I don know jack shit about Virii.. but I do remove a shit load everyday.. How..
1/RTFM.. I read up about the virii I am dealing with..
.. Use Google
.. Use AO search
.. Use Google
.. Search Symantec, Panda, Sophos, McAfee, F-Secure, Trend-Micro, Grisoft etc.
.. Post here
2/ Give my customers an estimate for the work
3/ Accept the Cash
4/ think only a few more days let til Xmas, sip on another lager before returning to step 1

ok

Cheers