Re: Innocent Virgins

From: Richard Benack [MS] (richbe@online.microsoft.com)
Date: 07/24/02


From: "Richard Benack [MS]" <richbe@online.microsoft.com>
Date: Wed, 24 Jul 2002 12:01:46 -0700


See if this helps:

1. Action: Looked through the add/remove program list & Uninstall web dialer

2. Action: Looked in the startup folder & remove program if found

3. Action: Try to delete the icon off of the desktop. If it

Cannot delete (e.g. source file may be in use) then reboot in safe mode, and
try to delete the icon there

4. Action: Remove the reference to the file from the registry

5. Action: empty the recycle bin and reboot

Hope this helps

Rich

This posting is provided "AS IS" with no warranties, and confers no rights.

"Andie Z" <andiez@banet.net> wrote in message
news:00b701c23264$29964eb0$b1e62ecf@tkmsftngxa04...
> I was infected by "Innocent Virgins" Friday July 19, 11:08
> AM. When I rebooted I had a porn window on my desktop, an
> entry in my start menu, a folder in my root directory, an
> entry in the registry, and an entry in C:\Program
> Files\Dialers\dialer123.exe. I use Win98se on a stand
> alone and DSL. I was using Hotmail e-mail and visited
> sandiegochannel.com. I never visited a porn site or
> clicked on any requests for a download. I had security
> set as tight as I could using IE 5. How did it get
> through? Does anyone know anything about "Innocent
> Virgins" or have any experience with it.



Relevant Pages

  • Re: trojan running from MRU registry keys!
    ... Just found a trojan running, ... It ran by having an entry in the startup folder, ... > copies would still re-appear on reboot & it would be running yet ...
    (comp.security.misc)
  • trojan running from MRU registry keys!
    ... Just found a trojan running, ... It ran by having an entry in the startup folder, ... copies would still re-appear on reboot & it would be running yet ...
    (comp.security.misc)
  • Re: Registry changes and Re-appearing programs in system start up
    ... desktop desktop.ini All Users Common Startup ... entry of the key, ... may be of interest to know that this Startup folder was always completely ... the binary data is changed ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Registry changes and Re-appearing programs in system start up
    ... entry of the key, ... may be of interest to know that this Startup folder was always completely ... the binary data is changed and I ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: SBS 2K3 reboots at noon everyday
    ... reboots the server, and the permission issue was apparently crashing the ... it is the System Event Log entry to which I am refering. ... > events and save the files, it uses the System account. ... it does not reboot at noon now. ...
    (microsoft.public.windows.server.sbs)