Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me

The Shed is going Social! Join us on FaceBook and Twitter and chime in on the conversation.

Go Back   Dev Shed ForumsSystem AdministrationAntivirus Protection

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old April 12th, 2004, 08:08 PM
cybe cybe is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2004
Posts: 7 cybe User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Exclamation w32.kwbot.worm virus!!!

I am screwed(sorry for my language) I have just found a horrible worm on my computer that slowly kills my computer and allows hackers to go in and out of my computer like nothing.PLEASE SOMEONE PLEASE WRITE ME A PROGRAM OR SUGGEST SOMETHING TO DO!!! And I can't reformat cuz the worm embeds itslef in the computer so even if I reformat it will still be on there.

Reply With Quote
  #2  
Old April 12th, 2004, 08:09 PM
azz0rMark2's Avatar
azz0rMark2 azz0rMark2 is offline
If you feel it, conceal it
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2004
Posts: 20 azz0rMark2 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via MSN to azz0rMark2
May I ask what relavence this is to PHP?

ANYWAY, I opened google and the first result helps you

http://securityresponse.symantec.co...kwbot.worm.html

Good day

Reply With Quote
  #3  
Old April 12th, 2004, 08:59 PM
balamm's Avatar
balamm balamm is offline
Contributing User
Dev Shed Intermediate (1500 - 1999 posts)
 
Join Date: Mar 2004
Posts: 1,742 balamm User rank is Corporal (100 - 500 Reputation Level)balamm User rank is Corporal (100 - 500 Reputation Level)balamm User rank is Corporal (100 - 500 Reputation Level)balamm User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 6 Days 12 h 8 m 2 sec
Warnings Level: 10
Number of bans: 1
Reputation Power: 14
Quote:
Originally Posted by cybe
And I can't reformat cuz the worm embeds itslef in the computer so even if I reformat it will still be on there.


You really don't have a grasp on how this all works.

There is no "embed"ing

a virus is a file, or script. Maybe a self replicating file or script in some cases.
It might hide inside another file or it might mascarade as another file.

What does formatting do?

It rewrites the file allocation tables on your hard drive.

It doesn't delete anything, it only creates a new "index" and the old files are overwritten with new files. (hopefully!)

Search active killdisk on google and make sure you know how to use fdisk and format and fully understand the differences between active, logical, and extended partitions before you even start.

Reply With Quote
  #4  
Old April 17th, 2004, 02:38 PM
dave2k's Avatar
dave2k dave2k is offline
Contributing User
Dev Shed Novice (500 - 999 posts)
 
Join Date: May 2003
Location: GB
Posts: 553 dave2k User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 27 sec
Reputation Power: 10
Quote:
a virus is a file, or script. Maybe a self replicating file or script in some cases


The definintion of a virus is that it is self replicating

Reply With Quote
  #5  
Old April 17th, 2004, 10:43 PM
DefinedHost's Avatar
DefinedHost DefinedHost is offline
Defined Group, Inc.
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2004
Location: San Francisco, CA
Posts: 219 DefinedHost User rank is Private First Class (20 - 50 Reputation Level)DefinedHost User rank is Private First Class (20 - 50 Reputation Level) 
Time spent in forums: 19 h 29 m 36 sec
Reputation Power: 10
There are a few virii's that embed themselves in images/mp3s (the current problem with iPod[first Mac virus]) as well as exe programs. In essence, it rewrites and compiles the program/image/etc.

Nasty little critters... but usually too complex to be sent far (as they're usually larger in size) due to teh filesize and dialup users.

Also there are a few that place themselves temp. in the RAM. Those are horrible (had them on my servers about a year ago and lost EVERYTHING).


DH

Reply With Quote
  #6  
Old April 18th, 2004, 04:47 AM
balamm's Avatar
balamm balamm is offline
Contributing User
Dev Shed Intermediate (1500 - 1999 posts)
 
Join Date: Mar 2004
Posts: 1,742 balamm User rank is Corporal (100 - 500 Reputation Level)balamm User rank is Corporal (100 - 500 Reputation Level)balamm User rank is Corporal (100 - 500 Reputation Level)balamm User rank is Corporal (100 - 500 Reputation Level) 
Time spent in forums: 6 Days 12 h 8 m 2 sec
Warnings Level: 10
Number of bans: 1
Reputation Power: 14
Quote:
Originally Posted by dave2k
The definintion of a virus is that it is self replicating


So where do we place these batch files then that simply execute and then go passive?
trojan? Maybe, maybe not.
If all it does is delete your drive contents....

For simpicity sake, I just prefer to refer to any destructive program or "operation" as a virus.

Mp3's yes! I've come across several of those but had others insist it isn't possible. They hide very well and don't always execute right away. I'm not sure of the structure but I had thought of it more as file padding.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationAntivirus Protection > w32.kwbot.worm virus!!!

Developer Shed Advertisers and Affiliates



Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 


Powered by: vBulletin Version 3.0.5
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.

© 2003-2013 by Developer Shed. All rights reserved. DS Cluster - Follow our Sitemap