Author Topic: Win32:Warezov-MC [Wrm] Help Please  (Read 3458 times)

0 Members and 1 Guest are viewing this topic.

MixaZzS

  • Guest
Win32:Warezov-MC [Wrm] Help Please
« on: October 18, 2006, 03:44:40 PM »
I got this message on ICQ:

18/10/2006 (13:13 GMT)
You have to see our corporate party's pictures, we are all shocked,
you have got to see this!
***********.com/a/qejw/mfsr.gif [argh, remember the name and don`t open it]

I have opened the link (DAMN IM A FOOL  :-X)

And now my computer is infected by Win32:Warezov-MC [Wrm] please help.
I have found it by background scanner, and complete scanning, the following files are infected in system32:
dfssrasc.dll, dfssrasc.exe, offfmsre.dll, psbaavic.dll, trz4.dll... Can`t repair this files, so I have put them to the chest. Please help me... This was a new computer!  :'(

Avast 4 Professional Edition, VPS 0642-2, Windows Xp Home Sp2

Sry for my bad english  :-[
« Last Edit: October 18, 2006, 05:56:04 PM by MixaZzS »

kolola

  • Guest
Re: Win32:Warezov-MC [Wrm] Help Please
« Reply #1 on: October 18, 2006, 04:44:15 PM »
Hi my computer also was infected by Warezov virus.

You can check this post.
http://forum.avast.com/index.php?topic=24276.0

I recommended you to see in the symantec site
http://www.symantec.com/security_response/threatexplorer/azlisting.jsp?azid=W

I use the AVG antispy and bitdefender.

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Win32:Warezov-MC [Wrm] Help Please
« Reply #2 on: October 18, 2006, 05:00:10 PM »
Quote
I have opened the link (DAMN IM A FOOL  Lips Sealed)

Then what does posting the link here for other people to click on make you?

This is a link to a live virus.

Please remove the link and do not post such links again!
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Win32:Warezov-MC [Wrm] Help Please
« Reply #3 on: October 18, 2006, 05:22:26 PM »
DrWeb CureIT! may be able to deal with the infection:

http://download.drweb.com/drweb+cureit/

The DrWeb link scanner detects it as Win32.HLLM.Limar:



     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

MixaZzS

  • Guest
Re: Win32:Warezov-MC [Wrm] Help Please
« Reply #4 on: October 18, 2006, 08:26:00 PM »
Hm... I think AVG killed it  ;D