. : News : . . : Message of the Week : .
You are currently viewing an archive of the Wilderness Guardians clan's IPB1 forums.

These forums were used by WG from 2008 to 2011, and now exist for historical and achival purposes only.

For the clan's current forums, CLICK HERE.
"You are a Wilderness Guardian. That northern wasteland; that land of blood, desolation and death is your dominion. Tonight we are going home."
~His Lordship
War Alert: OFF Raid Alert: OFF
PM a WG Official
 Um... what the hell?
Posted: November 26, 2010 04:04 amTop
   
User Avatar

IRC Nickname: Wayne|Eregion2
Group: Emeritus
Posts: 3087
Member No.: 156
Joined: January 25, 2008
Total Events Attended: 8
Restarted my computer earlier and when I came back there were multiple windows of Firefox opened (blank) and several notepad pages saying FOLLOW THE WHITE RABBIT....-MORPHIAS. I haven't been able to google any sort of virus that's known to do something like this and Avast! didn't find anything, anybody have a clue what's going on? unsure.gif
 
--------------------
user posted image

Posted: November 26, 2010 04:14 amTop
   


IRC Nickname: [Randy]
Group: Raid Leader
Posts: 5065
Member No.: 16
Joined: December 29, 2007
Total Events Attended: 499
You are the one.
 
--------------------

user posted imageuser posted image

Posted: November 26, 2010 04:21 amTop
   
User Avatar

IRC Nickname: DG_Keanu
Group: Council
Posts: 4782
Member No.: 2033
Joined: August 25, 2009
Total Events Attended: 173
Well the idiot who programmed it spelled "Morpheus" wrong so it won't be too hard to fix.

Try a different Antivirus software. Free ones are shit, if you can afford it get Norton or Kaspersky. If all else fails, I use a system restore. It's the worst way possible to get rid of viruses but it's worked twice for me so far.
 
--------------------
user posted image
[05:42] <+WG_Keanu> I think I got a semi just looking at the pic
[05:42] <%kat> same

Posted: November 26, 2010 06:05 amTop
   
User Avatar

IRC Nickname: Wayne|Eregion2
Group: Emeritus
Posts: 3087
Member No.: 156
Joined: January 25, 2008
Total Events Attended: 8
Yeah, at this point I'm more bemused than pissed. I've tried several different antivirus programs and none of them have found anything, and nothing else has been acting strangely. At this point I'm just wondering if it was a practical joke sort of thing that deleted itself after making a cute Matrix reference. mellow.gif
 
--------------------
user posted image

Posted: November 26, 2010 06:51 amTop
   
User Avatar

IRC Nickname: Wayne|Eregion2
Group: Emeritus
Posts: 3087
Member No.: 156
Joined: January 25, 2008
Total Events Attended: 8
Huh... well I restarted and it definitely hasn't gone away. And looking around there's weird files all over the place:
QUOTE
[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21801
IconResource=%SystemRoot%\system32\imageres.dll,-3
QUOTE
[.ShellClassInfo]
IconFile=folder.ico
IconIndex=0
ConfirmFileOp=0
Example of what was in two of them. I'm completely clueless and the internet isn't helping much here.
 
--------------------
user posted image

Posted: November 26, 2010 07:11 amTop
   
User Avatar

IRC Nickname: Wayne|Eregion2
Group: Emeritus
Posts: 3087
Member No.: 156
Joined: January 25, 2008
Total Events Attended: 8
Found all the original problem pages here:

C:\Users\Username\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

So they just pop up whenever I start, nice. Now to figure out how they got there.
 
--------------------
user posted image

Posted: November 28, 2010 09:46 amTop
   
User Avatar

IRC Nickname: Wayne|Eregion2
Group: Emeritus
Posts: 3087
Member No.: 156
Joined: January 25, 2008
Total Events Attended: 8
... roommates ...
 
--------------------
user posted image

Posted: November 28, 2010 02:03 pmTop
   
User Avatar

IRC Nickname: DG_Keanu
Group: Council
Posts: 4782
Member No.: 2033
Joined: August 25, 2009
Total Events Attended: 173
QUOTE: Eregion2 @ November 28, 2010 10:46 am)
... roommates ...

Lol'ed IRL tongue.gif
 
--------------------
user posted image
[05:42] <+WG_Keanu> I think I got a semi just looking at the pic
[05:42] <%kat> same