Ryan Jones Blog – dotCULT.com Ryan Jones Blogs About Internet Culture, Marketing, SEO, & Social Media

October 24, 2007

New Worst Virus Ever.

Filed under: Main — Ryan Jones @ 12:12 pm

Update: I finally got it reformatted. I had to flash the bios, then I had some hardware problems with the video cards(s) (apparently it doesn’t like having 3 of them in the machine) anyway.. I got it working again. I also learned a valuable lesson: if you work at home, have separate work and personal computers. I’m going to buy a new mac on Friday when Leopard comes out, cuz they look fun. Anybody had any experience with parallels? Does it work?

Update: The virus is called the Smitfraud virus, and I’m still unable to completely remove it. I probably need to reformat, but the backup time for the data I want is currently at about 2 days according to windows to transfer over to my portable hard drive.

Wow. After letting somebody (who won’t be named) visit a website called BuddyPic.com, I found myself infected with the worst virus ever!

Here’s what it did:

  1. Deleted some .dll files from my anti virus
  2. Added 12 browser helpers
  3. Deleted all my system restore points
  4. Disabled access to task manager
  5. Took away my ability to install new software
  6. Installed 144 different trojans / spyware programs – avast was going off every 15 seconds
  7. Connected to about 15 bot networks
  8. used up all my memory
  9. changed my desktop background

I’m still working to remove it. It’s taken up most of my morning so far. I’d love to reformat but there’s so much stuff I need to get off first, it might be quicker to remove the virus than to backup everything.

I also didn’t think firefox was succeptable to such exploits. The only thing I can think of is that the webpage somehow put itself into my trusted sites.

If the buddypic.com people read this, you’ve got some really malicious advertising. Anybody else reading this, please avoid buddypic.com like the plague.

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.

Powered by WordPress