|
Zimlabs.com Virus
I recently got a virus that makes my browser scroll down automatically, types in crap automatically and does all this crap to my computer. F*kin pisses me offffffffff!!!!!!!!!!!!!!!!!!! Do you know how I can get rid of it and not get it again i OMFG SO FRIGGAN AWSOME!!! HTTP:??WWW>ZIMLABS>NET?!!$&%%>HTML
hate it. all that crap in this paragraph is what the virus it typing in...please help!!!
Thanks
[ ]
Want to answer more questions in the Technology category?
Maybe give some free advice about: Computers?
Old question, but this may help anyone that still get manages to get infected.
This infection from zimlabs.net is called
W32/Lamo.worm otherwise known as CodeBlack
Upon execution, the worm copies itself to the following files.
* C:CodeBlack.exe
* C:WINDOWSsystem32CodeBlack.exe
* C:Documents and SettingsAll UsersStart MenuProgramsStartupCodeBlack.exe
* A:CodeBlack.exe
It then deletes the following files in the victim machine.
* C:WINDOWSsystem32Restorerstrui.exe
* C:WINDOWSsystem32Cmd.Exe
* C:Documents and SettingsAll UsersStart MenuProgramsPC Help & ToolsSystem Restore.exe
* C:Documents and SettingsAll UsersStart MenuProgramsAccessoriesSystem ToolsSystem Restore.exe
* C:WINDOWSsystem32taskmgr.exe
* C:WINDOWSsystem32dllcachemsconfig.exe
* C:WINDOWSpchealthhelpctrbinariesmsconfig.exe
The worm also adds the following registry entries.
* HKEY_CURRENT_USERSoftwareAmerica Online AOL Instant Messenger (TM)CurrentVersionUsersIAmGoneList
"GoneMsg0001" = " Aim Hacker 1.3 FREE!"
* HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain "Start Page" = "[Link](Mouse over link to see full location);
* HKEY_CURRENT_USERControl PanelInternational "s1159" = "??????"
* HKEY_CURRENT_USERControl PanelInternational "s2359" = "??????"
The worm sends one of the following messages to AOL Instant Messenger users. The message has a link to "[Link](Mouse over link to see full location); that contains a copy of this worm.
It also attempts to copy itself to the following shared folders.
This can be found on the internet, but in the past I aswel got this infection from www.zimlabs.net no longer online.
I had the pleasure of meeting Zim via AIM/AOL instant messenger, and I cant wait to see what he comes up with in the future as this worm.. from what he had known at 11-13 when he compiled this infection.. The next will get alot more hits.
Hope this helps.
Use McAfee, Kaspersky, Nortan, AVG or Panda to remove. I recommend BitDefender.
]
Hmmm odd one. I tried looking up your virus without a great deal of success. The only reference to zimlabs and viruses I found was in regards to AOL and the .exe file which apparently can get infected and carry viruses onto your computer. Dont quote me on this mind you, its just one reference.
Anyway, the solution should be the same as with any virus shouldnt it? Run an anitvirus program. Would have been good if you had mentioned what sort of protection you had running. Anyway, here are two free ones:
[Link](Mouse over link to see full location)
[Link](Mouse over link to see full location)
Even if they dont fully clean the thing, they might find another name for the virus, something that would give better results on the internet. However, I have found avast to be pretty good. Install it, run it, then right click anywhere on the main control panel and select from the menu "schedule boot time scan". You can also run it normally after that, but when you restart it will scan your computer before logging into Windows.
See if that helps. Good luck.
]
All you need is some sort of up to date virus scanner. AVG is a free software package which you can download quite quickly (depending on your connection speed) but isn't all that amazing. Sounds to me like its some sort of Ad aware. In which case I would download Ad-aware SE Personal (another free download) I always use it and its really handy to have, even if you dont have any problems.
]
More Questions: |