been hit by the Kornicova Virus

[Savage-Geek]

ok... my boss got the AnnaK. Viri and instead of Deleating it, he played with it..
now all basic text files have been converted to VBS and his Exploreer default page keeps being reset...
any ideas, suggestions????

yea i know this is a linux site, but the people here come up with better ideas than most Win sites :D

[The King Ant]

http://www.sarc.com/avcenter/venc/data/vbs.sst@mm.html

My Solutions:
1) Don't use Windows
2) If you have to use Windows, don't use Outlook
3) If you have to use Outlook, disable all that automatic running/downloading attachments/vbs stuff
4) Don't try to open a picture of Anna Kournakova when the file name is .vbs
5) Use Linux
6) Get some really recent virus scanner recovery disks and boot off of those to clean your computer
7) Reinstall Windows
8) Do't reinstall Windows, install Linux instead.

[Devrdander]

Here, check this out: http://www.europe.f-secure.com/v-descs/onthefly.shtml
It'll give you an idea of what it does and how you could go about cleaning it out of registry/files etc...

I suggest, clean out all vbs scripts on system you find and dont know what they are fore or look odd, make sure email is fully deleted, delete the following registry entry:

HKEY_CURRENT_USER\Software\OnTheFly = "Worm made with Vbswg 1.50b"


AnnaKournikova.jpg.vbs

Its not a bad worm, just anoying...
As far as all the text files that doesnt sound like the AnnaK virus, that sounds like loveletter, but it did it to jpgs mp3s and mp2's, hrmmm thats odd... also check in msconfig for programs loading in startup or in registry for them.

[ 13 February 2001: Message edited by: Devrdander ]

[Leoslocks]

McAfee has an online setup for dealing with problems.
http://www.mcafee.com/anti-virus/viruses/vbssst/default.asp

[Big_daddy]

Tell your boss to quit looking at pictures of women. If they have a problem with that, tell them to talk to us.