RotoGuru Computer Forum

View the Forum Registry

XML Get RSS Feed for this thread


Self-edit this thread


0 Subject: AIM - WORM_OPANKI.H

Posted by: J
- Leader [049346417] Tue, May 17, 2005, 01:24

So, I'm an idiot, I got an IM earlier from a "trusted source" :)

saying this:

this was cool, check it out

Well, I clicked on it, even downloaded and tried to open it without even thinking twice. Now I've got this worm and am not quite technologically advanced enough to be able to figure out how to get rid of it.

It sends this IM to (essentially) everyone in your buddy list every couple hours. So every few hours I'd get to see a bunch of away messages pop up as if I sent an IM.

Anyways, I found some websites that seem helpful, but I'm stuck, anyone else get hit with this thing and got rid of it?

TrendMicro.com
1R9
      Leader
      ID: 02624472
      Tue, May 17, 2005, 01:34
I got this message from either you or sw. If its sw I guess I'll be helping him soon enough too! ;) That link has a removal solution page, but you need a Trend Micro virus remover product. Do you have that? If not, I'll see if this one is on Symantec's virus lists...
2KnicksFan
      Donor
      ID: 30815418
      Tue, May 17, 2005, 01:36
I got a couple messages like this from Blooki. It's goin around...
3J
      Leader
      ID: 049346417
      Tue, May 17, 2005, 08:51
cool R9, practice on him, then you can help me squash this thing when I get home from work :)

And of course, my Norton Antivirus subscription expired...I renewed it after this thing showed up, scanned my system, but I dont think it got it.
4Dr. Doom
      ID: 7113048
      Tue, May 17, 2005, 10:03
Nice, I got the same message from the "trusted source", I stayed away.
5Punk42AE
      Donor
      ID: 036635522
      Tue, May 17, 2005, 12:49
Yeah I got it from SW, but was smart and didn't open it because it came from someone else a few days ago... While they were away.
6J
      Leader
      ID: 049346417
      Tue, May 17, 2005, 13:12
yeah yeah yeah, I refer you again to the first 4 words of my original post!!!
7smallwhirled
      ID: 324361621
      Tue, May 17, 2005, 14:29
Yea I don't know what is going on, but it all of the sudden spead throughout the gurupies. If a link comes up all of the sudden, IT'S NOT ME, don't open it. Only if we are having a conversation should you open a link, I must've gotten it from Blooki or something. Please let me know how to get rid of it, although, it seems to have only happened once, maybe that means it's gone???
8J
      Leader
      ID: 049346417
      Tue, May 17, 2005, 14:32
SW - we were in the middle of chatting thats why I opened it!!!

After I opened it, it got sent to pretty much everyone on my buddy list, then I closed AIM, ran ad-aware, turned AIM back on, and not too long later the link got sent out again. Then I ran Norton and went to sleep. SO I dont know if its gone or what, but I tend to doubt it.
9smallwhirled
      ID: 324361621
      Tue, May 17, 2005, 14:36
Really, didnt know that. All I know is it was doing some stupid things and I had no idea what the heck was going on....Just don't open links right now I guess.
10Punk42AE
      Donor
      ID: 036635522
      Tue, May 17, 2005, 19:04
Nah I was only smart because I hadn't talked to SW in a few months and he wasn't answering me.
11Astade
      ID: 12431718
      Tue, May 17, 2005, 19:08
Try aimfix and follow the directions.If it doesn't work, I would uninstall and then reinstall AIM.
I read somewhere (no source?!) that this type of worm can actually send out your password, so I would change passwords after re-installing. my 2 cents
12Ref
      Donor
      ID: 539581218
      Wed, May 18, 2005, 17:02
I got it from SW, but was in a rush and didn't have time to reply. glad I didn't. By the time I got back, he was offline and I didn't open it. Good thing! I usually don't open links unless the one that sends it is actively talking to me and it comes up in the middle of a convo.
13smallwhirled
      ID: 324361621
      Wed, May 18, 2005, 22:53
Heh, guess it's all my fault. Someone must've gave me the thing, I have no idea what happened. The good thing is, I guess it's not really a big deal, nothing has happened since.
RotoGuru Computer Forum

View the Forum Registry

XML Get RSS Feed for this thread


Self-edit this thread




Post a reply to this message: (But first, how about checking out this sponsor?)

Name:
Email:
Message:
Click here to create and insert a link
Ignore line feeds? no (typical)   yes (for HTML table input)


Viewing statistics for this thread
Period# Views# Users
Last hour11
Last 24 hours33
Last 7 days33
Last 30 days88
Since Mar 1, 20071120487