HELP! Chinese to Hacker-2 Monitor Worm.

HELP! Chinese to Hacker-2 Monitor Worm.

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
HELP! Chinese to Hacker-2 Monitor Worm. Bozeman 08-07-2006
Posted by =?Utf-8?B?Qm96ZW1hbg==?= on August 7, 2006, 6:58 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Help the computer challenged! I get a windows message every minute from
"RABIE to WORKGROUP" claiming that "some one killed ChineseHacker-2 Monitor".


How do I get a patch...or rid my system of this?

I have Internet Explorer Version 6.0. Thanks!!!!

Posted by David H. Lipman on August 7, 2006, 7:49 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Help the computer challenged! I get a windows message every minute from
| "RABIE to WORKGROUP" claiming that "some one killed ChineseHacker-2 Monitor".
|
| How do I get a patch...or rid my system of this?
|
| I have Internet Explorer Version 6.0. Thanks!!!!

Does the border of the Pop-Up Window indicate; "Messenger Service" ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?Qm96ZW1hbg==?= on August 7, 2006, 8:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
yes, yes it does.

"David H. Lipman" wrote:

>
> | Help the computer challenged! I get a windows message every minute from
> | "RABIE to WORKGROUP" claiming that "some one killed ChineseHacker-2 Monitor".
> |
> | How do I get a patch...or rid my system of this?
> |
> | I have Internet Explorer Version 6.0. Thanks!!!!
>
> Does the border of the Pop-Up Window indicate; "Messenger Service" ?
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Posted by David H. Lipman on August 7, 2006, 8:15 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| yes, yes it does.
|
| "David H. Lipman" wrote:


This is a NetBIOS Pop-Up. It is to be considered a form of spam.

If you are using Windows XP it means that you are NOT using Win XP SP2 as it
would have
mitigated this by two methods.
One is by auto-enabling the improved WinXP SP2 FireWall.
The second is it would have disabled the Windows Messenger Service.

To disable the Windows Messenger Service, you can open a Command Prompt and type
the
following commands...

sc stop Messenger
sc config Messenger start= disabled

A Router such as the Linksys BEFSR41 will also block this at the WAN/LAN
interface and such
messages won't be seen on a LAN PC.

If you are using Windows XP, I strongly urge you to install WinXP SP2.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?Qm96ZW1hbg==?= on August 7, 2006, 9:03 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
When attempting to run the command prompt, I am given another window that
states:

(16 bit MS-DOS Subsystem)
C:\WINDOWS\System32\command.com
C:\PROGRA~1\Symantec\S32EVNT1.DLL. An installable Virtual Device Driver
failed DII initialization. Choose 'Close' to terminate the applications.

I click close, and the program closes.
I click ignore, and the prompt does not recognize your given commands. Advice

Thanks so much for your help thus far!



"David H. Lipman" wrote:

>
> | yes, yes it does.
> |
> | "David H. Lipman" wrote:
>
>
> This is a NetBIOS Pop-Up. It is to be considered a form of spam.
>
> If you are using Windows XP it means that you are NOT using Win XP SP2 as it
would have
> mitigated this by two methods.
> One is by auto-enabling the improved WinXP SP2 FireWall.
> The second is it would have disabled the Windows Messenger Service.
>
> To disable the Windows Messenger Service, you can open a Command Prompt and
type the
> following commands...
>
> sc stop Messenger
> sc config Messenger start= disabled
>
> A Router such as the Linksys BEFSR41 will also block this at the WAN/LAN
interface and such
> messages won't be seen on a LAN PC.
>
> If you are using Windows XP, I strongly urge you to install WinXP SP2.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Similar ThreadsPosted
PC ACME Keylogger Monitor...can't uninstall March 10, 2006, 10:06 pm
Is monitor.exe in ZoneAlarm directory a keylogger? May 27, 2007, 2:34 pm
Virus Makes Monitor Go Black Upon Detection July 20, 2006, 12:06 pm
Worm VB.AS Aliases W32.Alcra.B and W32/Alcan.worm!p2p July 18, 2005, 8:37 am
WORM/DELF.FPV - new worm?? January 14, 2008, 6:58 am
new worm? June 20, 2006, 5:09 am
new worm i think November 22, 2006, 6:15 pm
RE NEW WORM November 23, 2006, 5:24 pm
Worm? November 11, 2008, 1:17 pm
Virus/worm? October 25, 2005, 2:29 am

The site map in XML format XML site map

Contact Us | Privacy Policy