I have a Virus

[Piebald]

Something called "EnerKaz", I am not sure what it is.

Anyways, can't look up any information on it because every single search engine (Google, Ask, Yahoo, even MSN) is blocked off from me. I am not sure why.

Anyways, I need a way to get rid of this virus that doesn't cost money... is there a good free virus-remover out there?

[Dee Dee Warren]

This works... :throw:

[Solly]

VIRUS NAME : W32/EnerKaz.worm.a




Virus Characteristics

This worm spreads via the KaZaa peer-to-peer file-sharing network. It requires the KaZaa software to be running to propagate, and requires that at least 98 different local content folders are being shared. When run, the worm displays a message box.

It creates the folder %WinDir%\Sys32 and copies itself there as turbo_forkaza.exe. It then modified the KaZaa sharing folder to point to the newly created one. This is accomplished through a registry key:


HKEY_CURRENT_USER\Software\Kazaa\LocalContent\dir99=012345:C:\WINDOWS\sys32

An additional key is created to assure that KaZaa's sharing setting is enabled:

HKEY_CURRENT_USER\Software\KAZAA\LocalContent\DisableSharing=0

Symptoms

Presence of %WinDir%\Sys32\turbo_forkaza.exe

or

Presence of %WinDir%\Sys32\spank_britney.exe

Method Of Infection

This worm spreads via the KaZaa file-sharing network by luring users into downloading and running itself.

[Sher]

Today @ 07:33 AM post located here (http://www.theologyweb.com/forum/showthread.php?s=&postid=239708#post239708)
Solly:

This worm spreads via the KaZaa file-sharing network by luring users into downloading and running itself.

:doh: Busted!

:rofl:

[yxboom]

Hamster:

Anyways, I need a way to get rid of this virus that doesn't cost money...
Go to Task Manager and turn off this process "project1.exe", then do a search in Explorer for "project1.exe" and delete it. Simple enough.


is there a good free virus-remover out there?

AntiVir Personal Edition (http://www.free-av.com/)

AVG Anti-virus (http://www.grisoft.com/us/us_dwnl_free.php) there is a free and pay-for-use version.

[Piebald]

Hey Sher, I use kazaa! (actually I knew it came from that!) I just don't download copyrighted software unless I own it already :-P

This came from downloading "The Sims" because I was too lazy to get my disc back from a friend who lives in Yuba city. :doh:

Solly and Boom - thanks for the information :smile:

[$cirisme]

No one ever reads the stickies (http://www.theologyweb.com/forum/showthread.php?s=&threadid=2544) :noid:

[Piebald]

What's a stickies?

[Sheepdog]

dude! KaZaa is spyware. you should delete it, run Adaware, and sprinkle your computer with holy water (or annointing oil, if you have it handy)!

[$cirisme]

Wouldn't water break your computer? :hrm:

[Piebald]

It was Kazaa-lite :ham:

[Sheepdog]

Cirisme: depends on the quality of the holy water. You'd want the stuff they use for vampies :tongue:

Hamster: run Ad-Aware. I am willing to wager that KaZaa lite has so much spyware, that removing it will cause KaZaa to not work.

[Piebald]

Well, I don't have it no more, so it's not a problem. But running adaware again might not be a bad idea, since it's been a while since I have done it!

[Sheepdog]

KaZaa, et al, leave stuff behind when they are uninstalled. so yeah, it is definitely a good idea.

[yxboom]

Sheepdog:

Hamster: run Ad-Aware. I am willing to wager that KaZaa lite has so much spyware, that removing it will cause KaZaa to not work.

Ive used KaZaa lite for over a year and have never picked up any spy-ware. The Ad-aware pro has not picked up any spyware files from the many upgrades of Kazaa lite I have made. As is the whole purpose of Kazaa lite, it is Kazaa minus the spyware.

[Sheepdog]

:hrm:

[Sher]

Today @ 02:47 PM post located here (http://www.theologyweb.com/forum/showthread.php?s=&postid=240354#post240354)
Hamster:

Hey Sher, I use kazaa! (actually I knew it came from that!) I just don't download copyrighted software unless I own it already :-P

Just raggin' ya, Hon :wink:

[LeiLani]

I have a virus too... *sniff* *sniffle* ACHOO!!!

Ugh... all over my screen...

Oh, you were talking about the computer kind....

[luv1another]

Today @ 02:49 AM post located here (http://www.theologyweb.com/forum/showthread.php?s=&postid=240364#post240364)
cirisme:

No one ever reads the stickies (http://www.theologyweb.com/forum/showthread.php?s=&threadid=2544) :noid:

cough cough :noid: am I no one:hrm: :poke: :whack: :Bump: :cry:
I did read it and even sent it to a friend to read so :nah:

[Piebald]

Well, I have a virus again. Seriously - I've been coughing all night and I feel kind of nauseus.

Plus I have a dentist appointment today (fillings, not caps as I had said before) :doh:

:doh: :doh: *ACK*

[JardinPrayer]

Awwwwwwwwww....Hammy. Feel better, sweetie!

And when you get a chance, check out the Avatar theme thread...I made one for you.

[Piebald]

I'll check it out when I can :smile: