Forum Home
Press F1
 
Thread ID: 55296 2005-03-07 08:51:00 I just got i virus, i think it is .pif. Tribomb (5547) Press F1
Post ID Timestamp Content User
331578 2005-03-07 08:51:00 Hi
I was on MSN, and i accepted a file from my friend, not knowing it was a virus, I think it was called Jenifer_lopez or something, then it said Run or close, i clicked run, the computer went weird. I scaned for viruses, it found nothing though. Is that a virus, if so what shall I do?
Thanks
Tribomb (5547)
331579 2005-03-07 08:56:00 Try a online scan to be sure.
Panda Active Scan -- here (www.pandasoftware.com)
Housecall -- here (www.trendmicro.com)
Trojan scans here (www.anti-trojan.net)
Spyware scanhere (www.windowsecurity.com)

hth
johnboy (217)
331580 2005-03-07 09:00:00 Smack said friend upside the head with a tyre iron.

Then try the online scans.

Then you may want to use that tyre iron for some self education as to why you should have AV protection and not open arbitrary files.
ninja (1671)
331581 2005-03-07 09:04:00 Try this securityresponse.symantec.com

From here

securityresponse.symantec.com

It might be the Bropia worm, which uses MSN and which also installs PIF files.

There's a few variants of this worm around tho, so this exe file might not fix it, if it isnt the one u have.
Speedy Gonzales (78)
331582 2005-03-07 09:08:00 Should i reformat, or will online scans get rid of it for sure? Tribomb (5547)
331583 2005-03-07 09:11:00 If u can remove it there's no need to format. Try that fixtool I posted. Speedy Gonzales (78)
331584 2005-03-07 09:12:00 Ok, but the pages wont load :badpc: Tribomb (5547)
331585 2005-03-07 09:17:00 Get the top file then thats the exe file. Click on it it'll download. Can u still download?? Speedy Gonzales (78)
331586 2005-03-07 09:24:00 Get the top file then thats the exe file. Click on it it'll download. Can u still download??

It dosnt work either, i tried in both mozilla ff and IE
Tribomb (5547)
331587 2005-03-07 09:25:00 this maybe the one you have, information here (translate.google.com le=%22Embarrassment%22%20smilieid=%222%22%20class= %22inlineimg%22%20/%3Efficial_s%26sa%3DG)
look for not so pleasant files on your pc if I remember correctly it seeds them everywhere
the file you received was most likly this one "jenifer_lopez.jpg.scr" It is listed on that site, it is not a screen saver as the last extension implies, the give away for me would have been the double extension, my suggestion "enable veiwing of extensions" !!!!!

be diplomatic and first inform your (ex :D) friend of the file he set you had a payload but then again you could take advice given earlier by ninja (my choice) :D

edit:
just read follow up posts that were posted while I was writing this
online scans dont, work try downloading A2 or stinger they are both trojan killers
beama (111)
1 2 3 4