PDA

View Full Version : Bombarded Wit A Virus



~FunK_mOb~
01-16-2004, 04:45 AM
I'm a little freaked out now.
I'm running my av and I just had to delete over 7000 files.One after another(I literaly had to hold my enter button down all the time in order to speed up the deleting).
But th thing that freaks me out th emost is that all the infected files were in C:\WINDOWS.All the files were just numbers and now my question is,How important are those files or what are those files?
The fact that they're all located in C\WINDOWS...is it a bad thing?Am I screwed? :huh:

The virus that infected those files is W32/Duload.D.6.
I haven't had the time to check out what kind of virus it is,so any info about it and wether or not i'm fucked is welcome.

fkdup74
01-16-2004, 05:44 AM
you had to delete the actual files, or the files your AV fixed/quarantined?
i mean, you did the deleting at your AV's prompting, right?

which AV?

4play
01-16-2004, 05:58 AM
it was probably the virus just replicating itself trying to eat up memory.

~FunK_mOb~
01-16-2004, 05:59 AM
the files i deleted couldn't be repaired anymore so i deleted them.Files that can be repaired are automaticly repaired without giving me any notice of it.
First I had about 8000 files to delete in C:\WINDOWS and after that I had to delete another 8000 or so in C:\WINDOWS\system32
My AV is antivir XP,doing a good job imo.
Anyway i checked the folders after the scan and they sure look cleaned up.
And everything seems to be working fine so I think it's ok?
But I only discovered that I could change my settings to 'delete without prompting' after I deleted my first flood of 8000 files manually :rolleyes:

Is it possible that a worm infects so many files in a matter of minutes,cause i just visited a site with cracks and serials and it left me with at least 3 trojans and a worm!!!

fkdup74
01-16-2004, 06:11 AM
i dont know bro, theres bugs out there that can modify/copy/delete files

if your AV has an auto-protect, it should have caught it :unsure:

if not, i'd get one with an auto-protect feature

and the only info i can find on that virus is in some foreign language,
and it didnt even really give info, just a list
it's not in symantec's knowledge base either

just have your windows cd handy :P

TheKiler
01-16-2004, 02:53 PM
Here's the info

http://www.sophos.com/virusinfo/analyses/w32duloada.html