Nyxem worm READ ASAP Everyone!

[.DareDevil.]

I dont see it on Avast anywhere cause i did a Virus Search!Still i cant afford to get a new computer and the virus wont hurt your computer enough to desroy it cause they have a patch to download if it did hit your computer.Steve they may of just updates News about it and finally figured out they were having trouble controlling it.Im going to check with Avast about it and see what they say.

LMAO just found this on google

http://www.google.com/search?hl=en&q=Nyxem+at+Avast%27

seems as if everyone is posting about it lol!

[.DareDevil.]

Also this makes we wonder because about a month ago i started receiving 200 or more emails daily on porn and stuff invading my old email which is visor_dflw@bellsouth.net.Now i have comcast but since we no longer use bellsouth i can still receive emails thru it but not send!I have to check it for old emails until i get them all sorted out and changed to my new comcast account.Anyways i did a scan with F-Force and said didnt have Nyxem although it might not be the worm since its been going on about a month unless i was one of its first victims.THe Nyxem is a Kamasutra virus for one is why it makes me wonder.I might do a scan with avast on my other computer since im doing everything on laptop and using it for other stuff like messengers some and old files i need.I have no VS on there forgot about putting new one on there but will do a scan with Avast on it and see.I know Symantec sucks but im also beggining to wonder if they tried to create a good virus and it went bad?I do know many of you have private emails.Anyways there are 2 types of viruses good and bad.Sometimes they make viruses that will fix problems on your computer or other stuff and that will destroy bad viruses.Ive seen one before but cant remember where cause it was on one of the AV sites but not Norton or anything.

[Mstenger404]

lets look at the odds of actually getting the virus shall we...

[Scattergun]

For normal users who do not go to weird crazy sites or sites like Limewire should not have a problem with it well atleast i dont and i hardly Download stuff

*Edit* AVG updated January 17 and January 27 for me adn on their main site it said they updated for the Nyxem.E virus so i should be pretty safe i think.

[Jeff]

Never got it, i guess McAfee caught it in the last update.

[Hellfighter]

will i copy my hard drive taken 3ea DVD-RW (10.5GB HD)to do it, and did my Aunts too her taken 5ea DVD-RW (22GB-HD).

i copy all things on them even the Partition, so it cover for all so.

a complete copy of the hard drives; files, programs, Partition everything.

[Troy]

Well I must be loved, didn't get through.

[Mstenger404]

only 13 hours and 44 minutes to live, we're all gonna die

:O

[Hellfighter]

1:10am [USA EST] did not hear any bomb go off? think the virus was a dud. it wins a booby prize.

[.DareDevil.]

Originally posted by Troy
Well I must be loved, didn't get through.

I love you from a guy to a guy still Troy but only as friends not in the gay way!

Also i am beginning to think it is just another virus if you get it, then you get it!Anyways im unistalling F-Force and moving on.

Sorry if it was a dud or just another virus from the way it sounded figured i would alert yall and make sure in case it was a big deal that no one got a screwed up computer!

[Hellfighter]

Originally posted by Steve
oooh nice


If the worm detects any of the registry values listed below on the victim machine, it will delete them:

[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
APVXDWIN
avast!
AVG7_CC
AVG7_EMC
AVG7_Run
AVG_CC
Avgserv9.exe
AVGW
BearShare
defwatch
DownloadAccelerator
kaspersky
KAVPersonal50
McAfeeVirusScanService
NAV Agent
OfficeScanNT Monitor
PCCClient.exe
pccguide.exe
PCCIOMON.exe
PccPfw
Pop3trap.exe
rtvscn95
ScanInicio
SSDPSRV
TM Outbreak Agent
tmproxy
Vet Alert
VetTray
vptray
NPROTECT
ccApp
ScriptBlocking
MCUpdateExe
VirusScan Online
MCAgentExe
VSOCheckTask
McRegWiz
CleanUp
MPFExe
MSKAGENTEXE
MSKDetectorExe
McVsRte

The worm also terminates active applications if the application name contains one of the following strings:

kaspersky
mcafee
norton
removal
scan
symantec
trend micro
virus
fix

It will delete all files from the following folders:

%ProgramFiles%\DAP\*.dll
%ProgramFiles%\BearShare\*.dll
%ProgramFiles%\Symantec\LiveUpdate\*.*
%ProgramFiles%\Symantec\Common Files\Symantec Shared\*.*
%ProgramFiles%\Norton AntiVirus\*.exe
%ProgramFiles%\Alwil Software\Avast4\*.exe
%ProgramFiles%\McAfee.com\VSO\*.exe
%ProgramFiles%\McAfee.com\Agent\*.*
%ProgramFiles%\McAfee.com\shared\*.*
%ProgramFiles%\Trend Micro\PC-cillin 2002\*.exe
%ProgramFiles%\Trend Micro\PC-cillin 2003\*.exe
%ProgramFiles%\Trend Micro\Internet Security\*.exe
%ProgramFiles%\NavNT\*.exe
%ProgramFiles%\Morpheus\*.dll
%ProgramFiles%\Kaspersky Lab\Kaspersky Anti-Virus Personal\*.ppl
%ProgramFiles%\Kaspersky Lab\Kaspersky Anti-Virus Personal\*.exe
%ProgramFiles%\Grisoft\AVG7\*.dll
%ProgramFiles%\TREND MICRO\OfficeScan\*.dll
%ProgramFiles%\Trend Micro\OfficeScan Client\*.exe
%ProgramFiles%\LimeWire\LimeWire 4.2.6\LimeWire.jar

All of this actions make the victim machine more vulnerable to subsequent attacks.

It may also download updates to itself via the Internet, without the knowledge or consent of the user.

It will also block the mouse and the keyboard.

On the 3rd of each month , 30 minutes after the victim computer is rebooted, the worm will rewrite files with the following extensions:

.doc
.xls
.mdb
.mde
.ppt
.pps
.zip
.rar
.pdf
.psd
.dmp

steve? did i read that right this worm will keep on each 3 day of the month? be come active? again

[Erik]

Yeah I thinks Chief...strangly enough..I dont think it was very effective the first time around.

[Steve]

Originally posted by Chief ADFP
steve? did i read that right this worm will keep on each 3 day of the month? be come active? again

sure, it's a very common thing for viri to be programmed this way.

[Hellfighter]

dang that means it still can spade more after a time into more system till there a windows patch to block this totally. crap thats suck.

can it change any time?

[.DareDevil.]

look what i found in a magazine

[Remove image]

please don't disaplay ads here! if you like to edited the telephone number out of it, then it be ok to display the image here.

you can make a thumbnail of the image to have other click-on the thumpnail to the larger image it be great too.

thumbnail 250x??? then link it to the larger image.

sample:

[URL=*URL address to larger image][*IMG] URL address to thumbnail smaller image[*/IMG][*/URL]

[Hellfighter]

its a ads thats all? they pay it to be in the magazine big deal we seen them all post ads in all type of magazine even in playboy and timelife magazine too.

all have place ads in all type of magazine.

its a sale ad.

[.DareDevil.]

lmao i know