"! GAYSEX IS GREAT !" [Worm - Spam]


Recommended Posts

A colleague of mine once had a program on his computer that kept changing the wallpaper to a pic of Bent Ladin buggering Bush and the caption saying "Make Love, not war!" I think he had to format the computer to get rid of it as none of us could figure out how it was happening.

i could do that :ninja:

i could also get rid of it probably :shifty:

damn, used the ninja again :whistle:

Link to comment
Share on other sites

good luck finding out what it is and removing it. if you visit those kinds of sites (not saying just gay porn), but any porn sites, be careful, they do try to install various things onto your computer.

just keep adaware or something updated and scan all the time. along with a virus scanner. hopefully it's something simple that you can just edit out of the registry.

ps...i LOVE that phrase "silly noodle" hehehe

Link to comment
Share on other sites

i could do that :ninja:

i could also get rid of it probably :shifty:

damn, used the ninja again :whistle:

To tell you the truth, none of us liked the guy, so we didn't put in much effort in to helping him. He was a dumb ass contractor and we were all pleased when he lost all his data after the format. The moron shouldn't have been visiting all those gay porn sites! :ninja:

Link to comment
Share on other sites

Gay things, you say? I want that worm...

Virus Check?

are you being sarcastic? :blink:

j/p :D

suggestions:

- find the source of the wallpaper/icons and (obviously) delete them

- system restore

- post in Google groups

- run Adaware

i am very confident this is a regestry edit. it is just a matter of deleting that little sentence and you should be fixed.

i suggest you find in the registry the part which holds the wallpapers and customisations, and look for anything suspicious.

Link to comment
Share on other sites

ok, after a bit of Googling (googled wallpaper +xp +registry) - i found out that the default wallpaper (which i assume affects your (hehe) abnormal pictures) is controlled by this registry editing:

System Key: [HKEY_USERS\.DEFAULT\Control Panel\Desktop]

Value Name: Wallpaper, TitleWallpaper

Data Type: REG_SZ (String Value)

perhaps whatever cruel bastarrd wrote this may have edited this string. check it out and see if there are anything suspicious.

Link to comment
Share on other sites

***UPDATE***

Ok, I got rid of the wallpaper, screesaver and icons with the registry, BUT as I said in my first post the virus wont let me change my desktop, becouse the desktop tab is gone!! oh and a friend of mine translated me that german sh|t and it said that it was like a backdoor that my emule mod has, it also said that the file causing all this gay stuff was "cdrunxp.exe" I found it and deleted it (also the registry things). Ok now my system is "normal" but only one thing, my desktop tab... i'll post a screenshot at the end of the post.

The gay virus runed whenever i clicked on an aplication so it appeared me the box with the ****ty "this file cannot be found... blah blah" lucky me I founa good spanish dude that told me how to get rid of it. [easy as fusck btw]

Searching more stuff on google groups i found this: link so now we all know that I DONT SEE GAY STUFF ;) [uff what a relief... no body would have believe me! "silly noodle" :shifty: ]

Also I was shocking for me to come from a nice vacation and see my nice system turned into a backstreet boy system!!! aaggghh!!!

Well, now all is in order, except for my desktop tab, :D

Oh now my notepad is in german... x_x uuummm whatever

post-32-1062521857.jpg

Link to comment
Share on other sites

Ok, I have to format my drive... This sh|t is driving me crazy every time I open the notepad with the run console the virus infects the files again, the thing is that the norton and all other programs doesn't see detect the virus... so I'll just have to format... life sucks... gay viruses suck even more ;)

Laters :(

Link to comment
Share on other sites

You could also submit it (the file) to the antivirus companies, see if they can update their virus defs for it since by the sound of it, this virus is one pain in the ...

Of course, that would probably mean the end of having some fun with some friends (unless they don't use AV software) :)

Link to comment
Share on other sites

Oookkk! Finished formaing and installing all the aplications and all... this gay virus suck! but hey I kept the file and Ill have some fun with some friends !! :D

Okay have we learned anything? I'll spell it out for you....

IF you look at gay porn, expect to get it up the *******!

:D

Link to comment
Share on other sites

YES !!!!!!!!!!

I think I found how to take this gay thing back!

When the screensaver of gays started I knew he was doing something on the background of my pc. So I pushed the button to turn it off and WIndows says current application running studio.exe...

I started again my pc and I have found that the file was exactly open for the last time exactly when the screensaver came!

I hope we got it!

to do:

search on all your hard drivers for the file studio.* (I had 4 of them) and delete them

search for gay.* and delete them

search in your registry studio.exe and delete all the keys and value with it!

I hope it doesn't come tomorrow...

Hope it helps!

Link to comment
Share on other sites

  • 4 weeks later...

hey jason

i did wat u told

but when i right click my desktop or view my c: drive or open my searh; it it shows me a message

which includes an error report

pls help!!!

--------------------------------------------------------------------

ok, after a bit of Googling (googled wallpaper +xp +registry) - i found out that the default wallpaper (which i assume affects your (hehe) abnormal pictures) is controlled by this registry editing:

System Key: [HKEY_USERS\.DEFAULT\Control Panel\Desktop]

Value Name: Wallpaper, TitleWallpaper

Data Type: REG_SZ (String Value)

perhaps whatever cruel bastarrd wrote this may have edited this string. check it out and see if there are anything suspicious.

Link to comment
Share on other sites

  • 2 weeks later...

try this site it will help:http://www.zonavirus.com/Foro/topic.asp?TOPIC_ID=2638

translate with :http://babelfish.altavista.com spanish to english and u will alright next time

it's a worm that come from emule or edonkey share prog with files that u download

i was have that gay staff too, mother fuc.............ers .

Link to comment
Share on other sites

i talked to m8 on messenger who got that virus but he didn't format everything, i believe he just went to norton's site. although i could be wrong. i can't really remember....

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.