Author Topic: Zonavirus  (Read 2662 times)

0 Members and 1 Guest are viewing this topic.

Sadly i think im infected with an evil virus called the zonavirus
it appears to have originated in spain or a spainish speaking country.  There are too files in my c drive that are not ordinary
zonavirus.dll and banderanegra
can anyone help me rid of this virus
=SSC=ADMRL
Shattered Star Confederation
Black Widows Squadron

 

Offline Redfang

  • 28
Hmm? :wtf:
 
Have you tried an anti-virus program?

 

Offline vadar_1

  • Mr. Crispy
  • 29
  • .
    • http://dynamic4.gamespy.com/~freespace/hosted/fullcircle/
"Shockingly, checking Draw Lines Between Marked Icons draws lines between the marked icons. " -Volition quality help files

Projects;
The Full Circle Project (site down - server side problem)
Paradox (site down - server side problem)

 

Offline Blue Lion

  • Star Shatterer
  • 210
heh, I got an email, two actually, spanish, with a file attached.

 
heh
well use macaffe or norton
ahhhh
try cnet,com
everr seen my ring?

 

Offline Fineus

  • ...But you *have* heard of me.
  • Administrator
  • 212
    • Hard Light Productions
Or if all else fails, format the hard drive :)

 

Offline NeoHunter

  • Primo Novus Venator
  • 28
Lucky I'm using Hotmail and not Microsoft Outlook. Outlook seems to be a very popular platform for spreading viruses.

 

Offline an0n

  • Banned again
  • 211
  • Emo Hunter
    • http://nodewar.penguinbomb.com/forum
Quote
Originally posted by NeoHunter
Lucky I'm using Hotmail and not Microsoft Outlook.
You say that like you think it's a good thing. At least with Outlook you don't have script-tards reading your e-mails and Hotmail staff deleting them.
"I.....don't.....CARE!!!!!" ---- an0n
"an0n's right. He's crazy, an asshole, not to be trusted, rarely to be taken seriously, and never to be allowed near your mother. But, he's got a knack for being right. In the worst possible way he can find." ---- Yuppygoat
~-=~!@!~=-~ : Nodewar.com

 

Offline Stryke 9

  • Village Person
    Reset count: 4
  • 211
You know, there's a very effective way of protecting against BOTH visruses and spam IMMEDIATELY! And it's FAIL-SAFE! It's called deleting and not opening E-mails from people you've never heard of with names like "l337-7U4d$uC|(r". And not opening suspect files from people you know unless you've been expecting some funky-ass attachment. I mean, really- viruses don't spread too well, you have to be unconscious or an idiot to get 90% of them, and most of the other 10% are target-specific, and thus wouldn't bother somebody no-one cares about enough to torpedo their computers (which is everyone here).

There are a few annoying macroviruses that can come from familiar email sources and not draw attention by being, say, a 100kb BAT file attachment. But they're not too effective, and really no more than annoying. The mosquitoes of the internet.

 

Offline Stealth

  • Braiiins...
  • 211
Quote
Originally posted by SSC-ADMRL
Sadly i think im infected with an evil virus called the zonavirus
it appears to have originated in spain or a spainish speaking country.  There are too files in my c drive that are not ordinary
zonavirus.dll and banderanegra
can anyone help me rid of this virus


It's a ".cpl" file, (Control panel applet)

I did a little research at the time i received the email.  The name is not "zonavirus" as it appears to be, it's from the 'Kitro' genre, aliases: IWorm_Kitro, I-Worm.Kitro, Duni

It spreads through emails (particularly if not solely hotmail (based on the mail.hotmail.com)) and through (brace yourself)  KaZaA file-sharing network.

I would post the signiture files here or something, but there's no point when you could read about it here:

http://www.europe.f-secure.com/v-descs/kitro.shtml

:D

i got the file attachment:  lomasimportante.cpl
(translated this says:  It's very important)

Of course if you try to access and/or download the attachment now it'll be recognized:


lol

try searching for any/all of the following:  (note:  don't delete them, just make sure they're there)

 c:\system32.exe
 c:\archiv~1\psycho.scr
(copied location)

may i recommend this virus scanner/protector:  
http://www.my-etrust.com

it's got a 30 free trial with a completely operational program, where you can download newest patches free and very quickly or automatically.  I've had this program for like 1 and a half years, and i've NEVER had one virus get into my computer.  It also has the option to 'clean' files, (i.e. you don't have to format)... it has a 'quick scan' mode and a longer scan (which takes hours, but searches every file carefully)




good luck, download that virus protector and that virus is history...

let us know what happens :)  or if you need more help ...

regards
~Stealth~

  

Offline Fineus

  • ...But you *have* heard of me.
  • Administrator
  • 212
    • Hard Light Productions
Quote

http://www.3dap.com/hlp/hosted/stealth/hostedpictures/virus.jpg

Uh, "It is not possible to download files that contain incurable viruses with Hotmail".

Does that mean that it's possible to download files with curable viruses from Hotmail? Or is that just bad wording on their part...

 

Offline Stryke 9

  • Village Person
    Reset count: 4
  • 211
It's all part of their special virus-sharing program... They just don't want it to get out of hand.:D

 

Offline Stealth

  • Braiiins...
  • 211
Quote
Originally posted by Thunder

Uh, "It is not possible to download files that contain incurable viruses with Hotmail".

Does that mean that it's possible to download files with curable viruses from Hotmail? Or is that just bad wording on their part...


certain files can be 'cleaned'... (if they've been infected)

since this file IS the virus itself, it's impossible for it to be cleaned.  the only way for it to be 'cleaned' is to be deleted, so therefore it's "incurable"...