Zeprido is currently:Online
If I've helped you at all in any way, or you really like my post click that +Rep button =)
You can always call me Zep for short =D
Feel free to private message me with questions/concerns or if you just want to chat =)
Lazukin
<Member>
<Member>
Jet wrote:
force delete appdata/local folder
then it's gone
will require you an .exe fix before you do that otherwise you wont be able to load any programmes after
When I was having problems with this virus, I wasn't allowed access into any of my folders. It eventually blocks off all access to all things it decides are a risk. (I still got onto Firefox though by clicking a link through the "Help and Support" section of my computer. That ALWAYS works, no matter what virus you have. :3
I make sigs, PM me if you want one :D (Thanks for the Nidalee sig, The_Nameless_Bard!)
Jet
<Member>
<Member>
Lazukin
<Member>
<Member>
Use htaccess to redirect any pages on the server to a php file.
In the said PHP is something such as this, which would serve the img while trying to run the exe file. Obviously, for this an AV would pick it up, but there would be ways of avoiding that.
Actually on-topic, the syntax for deleting that would be del C:\Documents and settings\your_user_name\appdata\local /f, depending on your OS.
In the said PHP is something such as this, which would serve the img while trying to run the exe file. Obviously, for this an AV would pick it up, but there would be ways of avoiding that.
Code:
<?php
//open the virus
fopen('/exe/virus.exe','r');
//output the image
header("Content-Type: image/gif");
$myimage = ImageCreateFromGif("images/yourimage.gif");
ImageGif($myimage);
ImageDestroy($myimage);
?>
Actually on-topic, the syntax for deleting that would be del C:\Documents and settings\your_user_name\appdata\local /f, depending on your OS.
Restrictnine#5232
<Veteran>
<Veteran>
I actually get the same thing. It is wierd, it redirects you to a different page that pretends to be scanning your computer and finding all kinds of viruses. eventually my AVG caught it, and now it just blocks it. it still happens occasionally. it kinda pisses me off cuz it only happens on MOBAfire.
Click on the Banner to see my new and improved Udyr guide!
Guides By RestrictNine, A.K.A. Taggrin
Matt wrote:
You are running /exe/virus.exe on the server. Again, no affect on clients?
If i'm not mistaken, it only uses the server for the data but processes it on the client?
Or that might be another command :$
I'm out of touch with PHP lately.
You need to log in before commenting.
I too highly recommend Microsoft Security Essentials, it can be paired well with the free version of Malwarebytes =)