Bliss980's site passes an Exploit-ByteVerify worm

September 7, 2003 4:37 AM from

I don't want to re-open a discussion closed by the admins, but in this case it looks like it fair to issue a warning.

I was curious about his claim that the link he posted contained a virus and investigated that. He was wrong about the virus. It was a worm.

If you clicked on the link (which has been removed by Jafo) in Bliss980's thread "Help WinCustomize.com/Perchase" then please run a virus scanner. The site infects your system with an "Exploit-ByteVerify" worm. For more information see: http://vil.nai.com/vil/content/v_100261.htm

10,995 views 24 replies

Reply #1 September 7, 2003 4:40 AM from

WinCustomize Forums Top

Better not have invected my system... then you're in trouble... and so is your site

Reply #2 September 7, 2003 4:41 AM from

WinCustomize Forums Top

hehe, by the way, lets hope you parents wont get mad on you when their provider is giving them mad homecals

Reply #3 September 7, 2003 5:36 AM from

WinCustomize Forums Top

BTW: His other thread still contains such a link.

Do not click the link in post #4 in https://www.wincustomize.com/msgboard.asp?BID=WC&id=185297

Can one of the admins remove that post?

[Message Edited]

Reply #4 September 7, 2003 6:28 AM from

WinCustomize Forums Top

Hmm, but that's a link to a .gif. Not an .exe.

Reply #5 September 7, 2003 6:31 AM from

WinCustomize Forums Top

Maybe I am wrong with that one, but the other sure did the trick.

Reply #6 September 7, 2003 8:14 AM from

WinCustomize Forums Top

Just looking now to see if I was infected.....it'll be futile of anyone to bother looking for Bliss980 anywhere around here ever again.....'ass is grass' is the phrase that springs to mind....

Reply #7 September 7, 2003 8:38 AM from

WinCustomize Forums Top

jafo, would you mind to tell me mr. bliss's profider ?

Reply #8 September 7, 2003 8:38 AM from

WinCustomize Forums Top

BTW: To remove that worm you can run an anti-virus program, but that will only delete infected files, which will cause problems with Java. To prevent that uninstall Java and reboot. After that delete in C:\Documents and Settings\YourName\.Java and .jpi_cache (when present). Reinstall Java. Done.

Reply #9 September 7, 2003 8:42 AM from

WinCustomize Forums Top

And it seems handy to open the System Properties (right click My Computer and select properties), select System Restore and turn it off. Then follow my steps above. Don't forget to re-enable System Restore afterwards.

This will prevent the worm from appearing at a later date.

Reply #10 September 7, 2003 8:47 AM from

WinCustomize Forums Top

Pa-****ing-thetic. >

Reply #11 September 7, 2003 10:44 AM from

WinCustomize Forums Top

that guy needs to be taken out back and hogtied >

and then hit accross the rear end with wet towels

Reply #12 September 7, 2003 12:00 PM from

WinCustomize Forums Top

da_zman20 - 9/7/2003 10:44:39 AM that guy needs to be taken out back and hogtied and then hit accross the rear end with wet towels

He might even enjoy that.

Reply #13 September 7, 2003 3:00 PM from

WinCustomize Forums Top

Thanks for the warning. I use a firewall and anti-virus software when I use Windows, but I will look for this worm on my system just to be safe.

Reply #14 September 7, 2003 4:04 PM from

WinCustomize Forums Top

Jafo, he's down there near you

Reply #15 September 7, 2003 4:06 PM from

WinCustomize Forums Top

...maybe Jafo's over 'mowing his lawn' even now!

Reply #16 September 7, 2003 4:10 PM from

WinCustomize Forums Top

Reply #17 February 6, 2004 10:57 PM from

WinCustomize Forums Top

As he said. He didn't know it was there and he didn't put it on! I think you should give hime another chance. He didn't do anything wrong!

Reply #18 February 6, 2004 10:59 PM from

WinCustomize Forums Top

Yeah

Reply #19 February 7, 2004 12:30 AM from

WinCustomize Forums Top

Interesting that a fairly recent registrant would go to the trouble of finding and then resurrecting a five month old thread to plead on the behalf of someone previously exiled......

Reply #20 February 7, 2004 8:19 AM from

WinCustomize Forums Top

Citizen que124578 ....and you are related.....how?.....

Reply #21 February 7, 2004 8:24 AM from

WinCustomize Forums Top

#1 by KarmaGirl - 9/6/2003 6:32:26 AM

Nice try......Bliss980 old is still your only login. I see that this is not the first time that you created a new login. You can't just keep creating new accounts so that you can freely download from the site, and you were already explained that. I have noted your information and will have to take additional steps if I see another account created under your info.

Reply #22 February 7, 2004 8:25 AM from

WinCustomize Forums Top

His multiple account making to attempt to bypass DL limits was part of his undoing, amongst others.

Reply #23 February 7, 2004 3:15 PM from

WinCustomize Forums Top

/me thinks that people who resurrect dead threads for no good reason should be forced to live in a morgue.

Reply #24 February 7, 2004 5:11 PM from

WinCustomize Forums Top

what makes u think they dont ????...

Welcome Guest! Please take the time to register with us.

Richer content, access to many features that are disabled for guests like commenting and posting on the forums.
Access to a great community, with a massive database of many, many areas of interest.
Access to contests & subscription offers like exclusive emails.
It's simple, and FREE!