Page 1 of 1
Serious Virus Alert Serious Worm
#1
Posted 13 December 2003 - 01:21 AM
-------------Newsflash: Stay away from infected posts!-----------------
Okay guys, I'm kind of scared. Lately, A lot of my friends, family, and co-workers have recieved this worm, here is the statistics from Mcafee of global infection in the past 30 days...
Infected Computers/Scanned Computers/% Infected
56,746/842,593/6.73%
This is a very serious thing, and here are the symptoms and how to get rid of it.
Virus Profile
Virus Information
Risk Assessment
- Home Users: Extreme
- Corporate Users: Extreme
Date Discovered: 11/23/2001
Date Added: 12/6/2001
Origin: Unknown
Length: Unimaginable
Smell: We don't know, the last 5 people to try died
Type: Worm
SubType: AI
DAT Required: None
Virus Family Statistics (over the past 30 days)
Infected Files Scanned Files % Infected Computers
85,170 675,326,521 3.47
11 218,075 0.00
356 14,643,625 0.02
Virus Characteristics
This enigmatic Artificial Intelligence Worm allows various hidden functions to take place on a user's system. It exists in two forms:
In HTA form, an HTML Application is created which is not visible to the user and can not be closed.
In HTML form, a browser window is created which is minimized and can not be easily maximized or closed.
Typically these window "tricks" are seen associated with advertisement and banner ad programs. Especially affiliated with pornographic sites and sites which pay commissions to others for displaying banner ads.
The AI does not contain any other payload and does not cause any damage to the local system. Files which trigger this detection should be deleted.
Indications of Infection
Minimized web browser window which can not be easily maximized.
Random strings of 0's, 1's, and oddly enough, 4's.
Randomly generated numbers
Repetition of a single phrase
Method of Infection
Viewing a web page which contains this intelligent javascript code creates the mysterious window in question.
Removal Instructions
All Users :
Use current engine and DAT files for detection. Delete any file which contains this detection.
Aliases
Cspace.Hehe.Worm.AI
Curvedspace.Hehe.Worm.AI
Rylkan.defenestrate.Worm.AUI
Cspace.AD.Worm.AI.DS
Cspace.Hehe.Worm.AI.b
Cspace.Hehe.Worm.AI.c
Baseballl.Hehe.Worm.AI
Recent addition to aliases for December 12 2003:
Zolbon.Hehe.Worm.AI
Emily.Saturn.Hehe.Worm
Mossy.Kiss.Hehe.Worm
Leftyy.Weebl.Bob.Worm
Cjjones.weebl.bob.worm
Zolon.Quite.Hehe.worm
Infected List
X Zolon
Mohsye
Spikeout
Baseballl
Star Jedi
Phieta
Leftyy
Cjjones
Amazonqueen
Serpentfight
Sk8boarder348
Apparently I have too been (hehe) infected and be careful, for if you come in contact with my, you too will become infected!
Okay guys, I'm kind of scared. Lately, A lot of my friends, family, and co-workers have recieved this worm, here is the statistics from Mcafee of global infection in the past 30 days...
Infected Computers/Scanned Computers/% Infected
56,746/842,593/6.73%
This is a very serious thing, and here are the symptoms and how to get rid of it.
Virus Profile
Virus Information
Risk Assessment
- Home Users: Extreme
- Corporate Users: Extreme
Date Discovered: 11/23/2001
Date Added: 12/6/2001
Origin: Unknown
Length: Unimaginable
Smell: We don't know, the last 5 people to try died
Type: Worm
SubType: AI
DAT Required: None
Virus Family Statistics (over the past 30 days)
Infected Files Scanned Files % Infected Computers
85,170 675,326,521 3.47
11 218,075 0.00
356 14,643,625 0.02
Virus Characteristics
This enigmatic Artificial Intelligence Worm allows various hidden functions to take place on a user's system. It exists in two forms:
In HTA form, an HTML Application is created which is not visible to the user and can not be closed.
In HTML form, a browser window is created which is minimized and can not be easily maximized or closed.
Typically these window "tricks" are seen associated with advertisement and banner ad programs. Especially affiliated with pornographic sites and sites which pay commissions to others for displaying banner ads.
The AI does not contain any other payload and does not cause any damage to the local system. Files which trigger this detection should be deleted.
Indications of Infection
Minimized web browser window which can not be easily maximized.
Random strings of 0's, 1's, and oddly enough, 4's.
Randomly generated numbers
Repetition of a single phrase
Method of Infection
Viewing a web page which contains this intelligent javascript code creates the mysterious window in question.
Removal Instructions
All Users :
Use current engine and DAT files for detection. Delete any file which contains this detection.
Aliases
Cspace.Hehe.Worm.AI
Curvedspace.Hehe.Worm.AI
Rylkan.defenestrate.Worm.AUI
Cspace.AD.Worm.AI.DS
Cspace.Hehe.Worm.AI.b
Cspace.Hehe.Worm.AI.c
Baseballl.Hehe.Worm.AI
Recent addition to aliases for December 12 2003:
Zolbon.Hehe.Worm.AI
Emily.Saturn.Hehe.Worm
Mossy.Kiss.Hehe.Worm
Leftyy.Weebl.Bob.Worm
Cjjones.weebl.bob.worm
Zolon.Quite.Hehe.worm
Infected List
X Zolon
Mohsye
Spikeout
Baseballl
Star Jedi
Phieta
Leftyy
Cjjones
Amazonqueen
Serpentfight
Sk8boarder348
Apparently I have too been (hehe) infected and be careful, for if you come in contact with my, you too will become infected!
#3
Posted 13 December 2003 - 02:10 AM
i was starting to freak out a bit. i wasnt sure exactly what was happening, so i continued to read. this is not a nice joke (funny, but not nice). also, i seriously doubt that if it trav els through posts (which im not even sure if it happens), then the infected list would be, ummmmm, everyone.
Sam's gay
#9
Posted 13 December 2003 - 04:47 PM
Lol, whoa there...
That was freaky in the first part, because it matches a virus that I've heard of a while back. But how did you find out about my worm!!! 1001011001440104
ARGH! 1001011001
HEHE! 040010400104
'TIS! 4001040400401001110
HOWDY! 10010004044011110104
CRESCENS! 4440010111001141410
That was freaky in the first part, because it matches a virus that I've heard of a while back. But how did you find out about my worm!!! 1001011001440104
ARGH! 1001011001
HEHE! 040010400104
'TIS! 4001040400401001110
HOWDY! 10010004044011110104
CRESCENS! 4440010111001141410



Page 1 of 1