Downloader Viruses

Rouge antivirus is a software that downloads onto your computer. When its on your computer, it puts on your screen LOTS of annoying pop ups saying "you have a virus". Its lieing to you. If you try to click the "upgrade to full version" button or so, it will bring you to a website where you can pay tons of money, but it doesent protect you from anything. They basically just stole your money. And also, when its on your computer, you cant open up anything. it blocks it out and displays an error saying its infected. Well anyways there you go.

boot sector virus

You can get them in web pages, for example cookie viruses.

' Open notepad.exe and copy / paste this text.

' Then save it as "class-x.vbs" include double quotation marks

' Then double click on class-x.vbs to remove Classified Trojan Worm!

'

' W32.Daprosy Buster, Version 1.0

' Emergency Release! NOT FOR SALE

' Copyleft 2009:

'

' You may add your own code to detect other variants of the worm.

' You may not however modify the code to maliciously damage a computer system.

' Script is distributed "AS IS" without warranty of any kind - use at own risk!!!

Sub DeleteTrojan(Trojan)

On Error Resume Next

Dim objFSO

Set objFSO = CreateObject("Scripting.FileSystemObject")

If objFSO.FileExists(Trojan) Then objFSO.DeleteFile(Trojan), True

Set objFSO = Nothing

End Sub

On Error Resume Next

Dim info

info = ""

info = info & "W32.Daprosy Buster, Version 1.0" & vbCrLf

info = info & "Emergency Release! NOT FOR SALE" & vbCrLf

info = info & "Copyleft 2009 by Itlog (lol!)" & vbCrLf

info = info & vbCrLf

info = info & "This VB script would remove Daprosy aka Autorun-AMS/AMW from your system." & vbCrLf

info = info & "Please DO NOT USE computer (especially Windows Explorer) while scanning" &vbCrLf

info = info & "is in progress!" & vbCrLf

info = info & vbCrLf

info = info & "Don't panic when your system slows down during scan - you will be" & vbCrLf

info = info & "NOTIFIED when scanning is completed." & vbCrLf

info = info & vbCrLf

info = info & "Click OK to continue..."

wscript.echo info

Dim objWMIService

Dim objFSO

Dim oReg

Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")

Set colProcessList = objWMIService.ExecQuery("Select * from Win32_Process")

For Each objProcess in colProcessList

cmdln = LCase(objProcess.CommandLine)

If InStr(cmdln, "\windows\lsass.exe") Then objProcess.Terminate()

If InStr(cmdln, "nthlpsvc1.exe") Then objProcess.Terminate()

If InStr(cmdln, "nthlpsvc2.exe") Then objProcess.Terminate()

If InStr(cmdln, "winnthlp1.exe") Then objProcess.Terminate()

If InStr(cmdln, "winnthlp2.exe") Then objProcess.Terminate()

If InStr(cmdln, "dirlock.exe") Then objProcess.Terminate()

If InStr(cmdln, "winzip.exe") Then objProcess.Terminate()

Next

Set objFSO = CreateObject("Scripting.FileSystemObject")

Const HKCU = &H80000001

Const HKLM = &H80000002

Set oReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")

oReg.DeleteValue HKCU, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "Win32"

oReg.DeleteValue HKCU, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "WinSys"

oReg.DeleteValue HKLM, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "LSAgent"

oReg.DeleteValue HKLM, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "LSAShell"

oReg.DeleteValue HKLM, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "DirLock"

oReg.DeleteValue HKLM, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "DirLocker"

oReg.SetStringValue HKLM, "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon", "Shell", "Explorer.exe"

Set oReg = Nothing

Set colFolders = objWMIService.ExecQuery("Select * from Win32_Directory")

For Each objFolder in colFolders

Folder = objFolder.Name

Trojan = Folder & ".exe"

Set objFolder2 = objFSO.GetFolder(Folder)

If ObjFolder2.Attributes And 2 Then objFSO.DeleteFile(Trojan)

ObjFolder2.Attributes = 16

DeleteTrojan Folder & "\classified.exe"

DeleteTrojan Folder & "\do not open - secrets!.exe"

DeleteTrojan Folder & "\read1st!.exe"

DeleteTrojan Folder & "\read1st.exe"

DeleteTrojan Folder & "\autorun.inf"

DeleteTrojan Folder & "\1.exe"

DeleteTrojan Folder & "\2.exe"

DeleteTrojan Folder & "\winnthlp1.exe"

DeleteTrojan Folder & "\winnthlp2.exe"

DeleteTrojan Folder & "\hlpsvc1.exe"

DeleteTrojan Folder & "\hlpsvc2.exe"

DeleteTrojan Folder & "\kbsys.exe"

DeleteTrojan Folder & "\kbdsys.exe"

DeleteTrojan Folder & "\dirlock.exe"

DeleteTrojan Folder & "\mp3-hot-collections.exe"

DeleteTrojan Folder & "\mp4-hot-collections.exe"

Next

Set objWMIService = Nothing

Set objFSO = Nothing

info = ""

info = info & "W32.Daprosy scan is complete!" & vbCrLf & vbCrLf

info = info & "Your system is now clean." & vbCrLf

info = info & vbCrLf

info = info & "NOTICE:" & vbCrLf

info = info & vbCrLf

info = info & "This script cannot detect other viruses, worms," & vbCrLf

info = info & "and unknown variants of w32.Daprosy."

wscript.echo info

wscript.quit

Do you mean Hamachi? It's a tool to share network between friends, most commonly used for lan games like Warcraft3, Cs etc. It doesn't give you virus if you download it from the right page.

https://secure.logmein.com/US/products/hamachi2/ download it from there and it will work fine.

//William

1. email
2. fileshare
3. pop-ups
4. webpages

The Trojan Horse was a gigantic wooden horse with a hole in its stomach so Greek soldiers could get out to concer Troy.

Absolutely.

Be careful in what you download and always scan downloaded files with an anti-virus to lessen your risk of infection. Most anti-virus programs support scanning ZIP archives.

Sometimes, but not always. It depends what you download.

problem in the sestem

because they thought the gods sent it to them.

You can make a trojan in any language. Most commonly used is Visual basic, C# and C++

You can get a USB anti-virus program using another computer then you can plug it into your computer with the virus and then perform a scan and it should be completed by removing or to quarantine the virus and your computer should not have the virus anymore.

No, lol it removes traces of viruses and clears temp folders that are where viruses are programmed to store.

Not at the current moment, but there have been problems in the past, such as all game data after the game "Knuckleheads" being deleted (Although they found a way to bring them back).

Depending on how vulnerable your computer is, and where you play it at (the original site) it does have virus.

three sensible precautions you can take to stop the spread of computer viruses?

It's important to be cautious when visiting streaming sites like GoGoAnime, as some users have reported encountering viruses or malware. To be safe, it's recommended to have up-to-date antivirus software installed on your device and to use reliable sources for streaming content.

It's not a virus, AVG just has a tendency to think any hacked program is a virus automatically.

no virus is helpful, they damage your software

replicate

hikis

No, a computer screen cannot be affected by a virus. Viruses can display information on a computer screen or mess with your display settings, but they cannot attack the screen itself. Computer screens don't usually have hard drives or CPUs in them, so they cannot be infected with viruses.