Log in

View Full Version : Damn virus again



Xcalibur
11-06-2004, 09:04 PM
C:\WINDOWS\Melda.scr est contaminé par W32.Ronoper.Worm
C:\WINDOWS\SysScript.exe est contaminé par W32.Ronoper.B@mm
C:\WINDOWS\Systools.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\BackyardBasketball.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\BackyardHockey.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Civ3.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Civ3ConquestsSetup.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\EuropeanAirWar.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Missile.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\RealPlayer10Beta.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Risk.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Snooker.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd1.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd10.scr est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd11.scr est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd12.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd13.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd14.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd15.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd2.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd3.scr est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd4.scr est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd5.scr est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd6.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd7.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd8.exe est contaminé par W32.Ronoper.Worm
D:\RECYCLER\S-1-5-21-1229272821-1177238915-839522115-1003\Dd9.exe est contaminé par W32.Ronoper.Worm
D:\My Shared Folder\C&C TIBERIAN SUN.exe est contaminé par W32.Ronoper.Worm
D:\My Shared Folder\cdkey warcraft 3 the frozen throne (1).exe est contaminé par W32.Ronoper.Worm
D:\My Shared Folder\civilization III working crack.exe est contaminé par W32.Ronoper.Worm
D:\My Shared Folder\Command & Conquer General - tested on Feb 19 and seems to actually work fine.exe est contaminé par W32.Ronoper.Worm
D:\My Shared Folder\command and conquer generals - CD Key Generator.EXE est contaminé par W32.Ronoper.Worm
D:\My Shared Folder\War3 frozen throne cd key (1) (1).exe est contaminé par W32.Ronoper.Worm
D:\My Shared Folder\Warcraft 3 The Frozen Throne v1 12 NoCD Crack.exe est contaminé par W32.Ronoper.Worm
D:\My Shared Folder\WarCraft III frozen throne keygen.exe est contaminé par W32.Ronoper.Worm
D:\My musique\Empire Earth.exe est contaminé par W32.Ronoper.Worm
E:\acdsee.exe est contaminé par W32.Ronoper.Worm
E:\Alcohol120_trial_1_9_2_1705.exe est contaminé par W32.Ronoper.Worm
E:\arcanum_fr_1074.exe est contaminé par W32.Ronoper.Worm
E:\Arcanum_Patch_1.0.7.0.exe est contaminé par W32.Ronoper.Worm
E:\battlefield_1942_patch_v1.6.19.exe est contaminé par W32.Ronoper.Worm
E:\battlefield_1942_patch_v1.6.19.exe.Tmp est contaminé par W32.Ronoper.Worm
E:\bushroyalrampage.exe est contaminé par W32.Ronoper.Worm
E:\celestia-win32-1.3.2.exe est contaminé par W32.Ronoper.Worm
E:\Civ3PTW127f.exe est contaminé par W32.Ronoper.Worm
E:\dxwebsetup.exe est contaminé par W32.Ronoper.Worm
E:\EZAntivirus.exe est contaminé par W32.Ronoper.Worm
E:\fo2mapper.exe est contaminé par W32.Ronoper.Worm
E:\FxBgleMO.exe est contaminé par W32.Ronoper.Worm
E:\icqpro2003b.exe est contaminé par W32.Ronoper.Worm
E:\mirc614.exe est contaminé par W32.Ronoper.Worm
E:\MP3Burnersetup.exe est contaminé par W32.Ronoper.Worm
E:\mushclient345.exe est contaminé par W32.Ronoper.Worm
E:\platypus_miniclip.exe est contaminé par W32.Ronoper.Worm
E:\prg-kav_perso_4.5.0.94_frecd.exe est contaminé par W32.Ronoper.Worm
E:\psisetup.exe est contaminé par W32.Ronoper.Worm
E:\san10.exe est contaminé par W32.Ronoper.Worm
E:\savethesheriff.exe est contaminé par W32.Ronoper.Worm
E:\sg32inst.exe est contaminé par W32.Ronoper.Worm
E:\SkyCaptain_Installer.exe est contaminé par W32.Ronoper.Worm
E:\WolfET.exe est contaminé par W32.Ronoper.Worm
E:\zmudinstall.exe est contaminé par W32.Ronoper.Worm


Help?

Trinitis
11-06-2004, 09:07 PM
Step 1 : toss computer out window

Step 2 : Spend life with wife and kids.

Tsa`ah
11-06-2004, 09:08 PM
Step 3 : Read all about Karma.

Hulkein
11-06-2004, 09:08 PM
Step 3 : Sniff panties.

Hulkein
11-06-2004, 09:08 PM
BLAST, I'LL GET YOU FOR THIS TSA`AH!

Xcalibur
11-06-2004, 09:08 PM
Cool, now pratical help?

Trinitis
11-06-2004, 09:10 PM
Originally posted by Xcalibur
Cool, now pratical help?

Easy answer?

Format

Tough answer?

Umm..scour the internet looking for ways to remove all the viri, get more because you don't use firewalls/Virus scanners, then proceed to step one.

Chelle
11-06-2004, 09:10 PM
See step #1.

That seems pretty practical to me.

Tsa`ah
11-06-2004, 09:10 PM
I think most people reading these boards will see your virus as a good thing.

If it isn't broke, why fix it?


Hulkein ... edit button.

Xcalibur
11-06-2004, 09:11 PM
You can keep the sarcasm out, a lot of my works for my studies are on this computer and I need it.

Hulkein
11-06-2004, 09:12 PM
Originally posted by Tsa`ah
Hulkein ... edit button.

I'd rather take the scorned cartoon villain character route.

Suppa Hobbit Mage
11-06-2004, 09:13 PM
Step 5: stop downloading key generators and porn

Xcalibur
11-06-2004, 09:13 PM
It is broken, otherwise my computer wouldn't be slow as hell and my outlook sending crap to my co-students.

Trinitis
11-06-2004, 09:14 PM
Originally posted by Xcalibur
You can keep the sarcasm out, a lot of my works for my studies are on this computer and I need it.

Face it X, your fucked. That size of an infection is going to take HOURS of work to remove, if you manage to remove it all. And during that time, you'll most likely contact more, because you refuse to use what is out there to prevent the infections. You shot yourself in the foot, its time to eat the bullet (not litterally).

Since this is not the first time, maybe you should think about a virus scanner and fire wall now eh?

You got to remember, for the most part, the people that make these viruses are smarter then you are. Hell, they are smarter then I am, I can admit that!

I spent nearly 16 hours removing a single bug from my computer..you've got how many on yours? How many of those opened back doors for more? How many are hidden and not active right now? Its a mess bro, suck it up and format.

Hulkein
11-06-2004, 09:15 PM
Originally posted by Xcalibur
You can keep the sarcasm out, a lot of my works for my studies are on this computer and I need it.

Buy an anti-virus program. If it is that serious don't risk getting something online for free that doesn't work.

BigBadBonar
11-06-2004, 09:19 PM
You could always just stop being canadian, in that case we could at least read the corrupted files...

C:\My Downloads\BackyardBasketball.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\BackyardHockey.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Civ3.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Civ3ConquestsSetup.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\EuropeanAirWar.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Missile.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\RealPlayer10Beta.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Risk.exe est contaminé par W32.Ronoper.Worm
C:\My Downloads\Snooker.exe est contaminé par W32.Ronoper.Worm

Hmm, most of those seem like illegally downloaded files. Stop using filesharing software after you format.

Numbers
11-06-2004, 09:22 PM
Go to grisoft.com

Download the free AVG anti-virus. Update definitions, run it.

Antivirus.com also has a free scanner you can use.

Trinitis
11-06-2004, 09:24 PM
Originally posted by 3704558
Go to grisoft.com

Download the free AVG anti-virus. Update definitions, run it.

Antivirus.com also has a free scanner you can use.

Bah, someone delete the above post. It is completely off topic. This is where we make fun of X and be completely unhelpful, sheesh!!

:D

Drew
11-06-2004, 09:28 PM
My computer got infected that bad before, it's not savable, just suck it up and format it.

imported_Kranar
11-06-2004, 09:32 PM
If you have Norton Anti-Virus, just go into Safe Mode and then run a full scan and delete every single file infected. All of them with no exceptions.

Xcalibur
11-06-2004, 09:49 PM
Kranar, I'm trying some stuff, thanks for the help.

...

I cannot format or I'll be dead.

LordAdredrin:P

Tsa`ah
11-06-2004, 09:51 PM
In that case ... format!

Jazuela
11-06-2004, 10:26 PM
http://securityresponse.symantec.com/avcenter/venc/data/w32.ronoper.worm.html

Trend Micro has info as well, implying that the worm might be propagated through Kazaa and IRC.

So - if you're using ICQ, chatting on IRC, or using Kazaa, that's how you got the worm. It's pretty old - it's been around since 2003 and is considered a "low risk" for home computers.

If you have THAT virus, chances are you have others.

What Kranar says about deleting files is correct, but it isn't enough. You have to get rid of the worm or it'll just feed itself into other files as you pick them up.

Get an antivirus program, or run PCIllin every week (it's an online anti-virus program).

Don't use Kazaa (that should be a given). Don't use ANY file-sharing programs and disable file sharing on your hard drive. Stop using Microsoft Outlook. Configure your e-mail program to recognize and reject spam. Don't open ANY forwarded e-mail or e-mail containing files that you didn't specifically ask for. All of these things contribute to virus spreading.

HarmNone
11-07-2004, 04:00 AM
Xcalibur, get a damned Anti-virus program! Also, you might try putting the name of the virus or worm you're having trouble with into Google. It's amazing what one can find out for oneself if one but tries. :rolleyes:

Here's a link with a program that will get rid of the worm for you:

http://www.2-spyware.com/remove-i-worm-ronoper.html

Tsa`ah
11-07-2004, 05:03 AM
I no longer like you Harm.

SpunGirl
11-07-2004, 05:10 AM
Wow. $25 reward to the person who can prove they did this to Everyone's Favorite X.

-K

HarmNone
11-07-2004, 05:10 AM
Hee! Somehow, I'm quite sure that, worm or not, Xcalibur will continue to haunt these boards like the ghost of horrors present, past and future. He's inevitable, ya know...kinda like taxes. I just figure that if he gets rid of the freaking worm, he won't be infecting those on these boards whose email addresses he has access to........ :sigh:

SpunGirl
11-07-2004, 05:13 AM
Originally posted by HarmNone
He's inevitable, ya know...kinda like taxes.

But taxes do provide some services here and there. Maybe you should say inevitable like death. :D

-K

HarmNone
11-07-2004, 05:18 AM
In some cases, Spun, even death provides a service, if you want to look at it that way....depending on who dies. :D

Caiylania
11-07-2004, 06:52 AM
Awwwww, you guys are so sweet!

Nieninque
11-07-2004, 01:12 PM
Originally posted by SpunGirl
Wow. $25 reward to the person who can prove they did this to Everyone's Favorite X.

-K

I CLAIM MY $25

[Edited on 7-11-04 by Nieninque]

StrayRogue
11-07-2004, 01:27 PM
LOL, I know what that is, and I know you have to be a moron to cause it. I guess it all adds up.

Xcalibur
11-07-2004, 05:14 PM
When opening a generator of cd-key. Simply.

Thanks for the help, i'm now VIRUS-FREE! WOWOOWOWOW

Nieninque
11-07-2004, 05:16 PM
Fuck

:sniffle:

Snapp
11-07-2004, 05:20 PM
Originally posted by SpunGirl
Wow. $25 reward to the person who can prove they did this to Everyone's Favorite X.

-K

They didn't do a good enough job evidentily. $50 to someone who can do it right.

Betheny
11-07-2004, 05:22 PM
Originally posted by Nieninque

Originally posted by SpunGirl
Wow. $25 reward to the person who can prove they did this to Everyone's Favorite X.

-K

I CLAIM MY $25

[Edited on 7-11-04 by Nieninque]

ROFLMAOTIP!!!!!!!

Xcalibur
11-07-2004, 06:14 PM
Damn she loves me...

Stop it. It's not good for my ego:lol:

Edaarin
11-07-2004, 08:54 PM
I think Xcalibur is even smarter than Warclaidhm.

Xcalibur
11-10-2004, 10:19 AM
Hmm, cannot erase a file (warcraft 3 .exe)... I don't seems to know why, anyone know how to help that?

Wezas
11-10-2004, 10:31 AM
Originally posted by Xcalibur
Hmm, cannot erase a file (warcraft 3 .exe)... I don't seems to know why, anyone know how to help that?

Check to see if it's in your running processes TaskManager -> Processes.

It may currently be running.

If that's not the case - reboot in safe mode (or DOS) and delete the file from there.

Shalla
11-10-2004, 10:32 AM
I want to gloat soooo bad.. I was one of the people he was mean to.. then I think about his wife and baby who he probably needs to support.. ohh Le' Dilemma.

:compcrash:

Wezas
11-10-2004, 10:35 AM
And because I don't just want to be helpful:


Originally posted by Xcalibur
C:WINDOWSMelda.scr est contaminé par W32.Ronoper.Worm

There's your problem right there.

No, not the virus.... look to the left.... there it is.

HAW HAW HAW, I AM LE FRENCH!

Xcalibur
11-10-2004, 11:52 AM
Originally posted by Lady Shalla
I want to gloat soooo bad.. I was one of the people he was mean to.. then I think about his wife and baby who he probably needs to support.. ohh Le' Dilemma.

:compcrash:


eHHHHHHHHHHHH?

Remove that idea from your head RIGHT now, I'm not an asian-lover, sorry sis.

Wezas, i keep having some pop up windows of casinos, and search and destroy doesn't remove em, normal?

Shalla
11-10-2004, 11:54 AM
Originally posted by Xcalibur
Remove that idea from your head RIGHT now, I'm not an asian-lover, sorry sis.


I don't know where you're getting that assumption.. but eew. stop right now.

Xcalibur
11-10-2004, 11:55 AM
How do you go to safe mode with win XP?

Lady Shalla: Shut up, you're not my type of girl.

[Edited on 10-11-04 by Xcalibur]

landon
11-10-2004, 11:56 AM
START > RUN> MSCONFIG, then go into the boot options, and select BOOT into SAFEMODE.

:)

Snapp
11-10-2004, 11:58 AM
Take your computer and throw it in front of a truck. That's the best virus protection.

Shalla
11-10-2004, 12:04 PM
Originally posted by Xcalibur
Lady Shalla: Shut up, you're not my type of girl.



OMG! Xcalibur! you er so moi dremboat, my uber le french canadienne hawtie, my le' computerre has ze sexuel virus from my pornegrafic masturbezion! I zee inzert my wittle menhood on zee diskdrive! ohh moi foi.. zee humenity!

Karma asshole!

Xcalibur
11-10-2004, 12:28 PM
I'm speaking french and somewhat spanish, my german "skill" is only half my blood.

And I don't believe in karma and I will stop downloading key generators for warez stuff.

xtc
11-10-2004, 02:38 PM
As said before u need a good AV program and a firewall. Panda Platinum is a decent AV program and has a built in firewall. Kranar is correct if you have Norton run it in safe mode and delete all virii. If u don't currently have an AV program you can scan for free at many AV sites Norton, Panda, Trend Micro all offer free online scans.

http://www.google.com/search?sourceid=navclient&gfns=1&ie=UTF-8&q=free+online+scan


Failing that reformat.

LastSamurai
11-10-2004, 04:37 PM
Originally posted by Lady Shalla

Originally posted by Xcalibur
Lady Shalla: Shut up, you're not my type of girl.



OMG! Xcalibur! you er so moi dremboat, my uber le french canadienne hawtie, my le' computerre has ze sexuel virus from my pornegrafic masturbezion! I zee inzert my wittle menhood on zee diskdrive! ohh moi foi.. zee humenity!

Karma asshole!

I think I'm going to start talking like this IG. RP award anyone?

SpunGirl
11-10-2004, 08:03 PM
Originally posted by Xcalibur
Lady Shalla: Shut up, you're not my type of girl.


Anyone else feel that breeze? It was from Shalla's massive sigh of relief.

-K

Xcalibur
11-10-2004, 10:09 PM
In fact, most aren't here, I'm not into fatties.:grin:

Nieninque
11-10-2004, 11:27 PM
Want someone different to your fat fucking self huh?

Xcalibur
11-11-2004, 08:31 AM
In fact, yes. And you're right, still having 20 pounds more at 6'1 is a LOT of fat.

:bleh:

Kainen
11-11-2004, 08:37 AM
Tell you what.. anyone who's fat should be happy they are for the simple fact that you wouldn't be attracted to them. In your own way you are as bad as Warclaid.. you are just an attention whore that uses your "dislike of fat girls" to get people to respond to you. I bet that you are one of those guys that LOVES fat chicks and just can't stand it. Do yourself a favor.. find a nice big girl and settle down.. you'll feel better.