Virus Warning (Everyone READ)

  • Two Factor Authentication is now available on BeyondUnreal Forums. To configure it, visit your Profile and look for the "Two Step Verification" option on the left side. We can send codes via email (may be slower) or you can set up any TOTP Authenticator app on your phone (Authy, Google Authenticator, etc) to deliver codes. It is highly recommended that you configure this to keep your account safe.

TAZTG

Your face, Your ass-Whats the Difference
Sep 12, 2001
3,748
2
38
63
Brunswick, MD
Its all over the news about a new Virus, named LoveSand something like that. Its seems that is what DEV had yesterday. Its cause's your Rig to Shutdown & Restart, run real slow are other strange things. If you haven't already done so go an Run Windows Update for the Security Patch. Its been out a couple of weeks already. If you have it already update your AntiVirus Software and try to get rid of it or like Dev run System Restore and go back to a good date. (Make sure to get the updates)
 

TAZTG

Your face, Your ass-Whats the Difference
Sep 12, 2001
3,748
2
38
63
Brunswick, MD
«BuA»Devastator said:
System restore does not work... it kept doing it but I was OK for a while
Update your Antivirus and see if it can detect and remove the virus. Check out the Mcafee, they tell you what to look for and how to remove it.

If not a Reformatting and reinstalling is a sure fire way to clean ones system up. Its a pain in the arse. Keep us posted Dev..
 

Devastator

What are YOU looking at?
Apr 8, 2003
2,171
1
38
43
North
bua.beyondunreal.com
Virus i got is called MS Blast or W32.blaster.worm

There is a tool over at symantec to remove it. They suggest to temporarly shut down system restore because it might restore an infected file.

here is the link for the tool:
http://securityresponse.symantec.com/avcenter/FixBlast.exe


Here are other names for that virus:
W32/Lovsan.worm [McAfee], Win32.Poza [CA], Lovsan [F-Secure], WORM_MSBLAST.A [Trend], W32/Blaster-A [Sophos], W32/Blaster [Panda]

I yhink a new one jus got out this morning:
W32.Randex.E [Norton], IRC-BBot [McAfee], WORM_RPCSDBOT.A [Trend]

W32.Randex.E is an Internet Relay Chat (IRC) Trojan Horse that allows its creator to control a computer by using IRC. It is also a worm that can use the DCOM RPC vulnerability (described in Microsoft Security Bulletin MS03-026) to spread itself.[Norton]

Be careful guys