Some kids attempting to spread their botnet(s) Across Forum's.

Well, Some idiots are trying to spread their botnet on some site's which lead to sythe forums, so if you clicked any of the following links you may be infected.

Do NOT go to any of these sites:



There may be more but I'm just warning you guys of the ones i've Currently Progressed on.

I contacted his free hosting company and they suspended his accounts but he might re-direct his free domains somewhere else.

If you ran the java app I'll tell you some possible places that the malware might hide itself.

First of all, the MSCONFIG. (If you don't know how to access this it is easy, All you have to do is click Start>Run>msconfig)



REMEMBER IT IS SAFE TO UNTICK ALL OF THE FILES AND ALSO SAFER!

If there is anything that you don't know of on the startup list, Untick it. (Disabling all the startup items is the best thing)

2. Registry.

To access the regisrty editor you must click start and search for regedit.exe

Once you are there go to the following directory:

Code:


It also might add itself to:
Code:


Once you are there it should look similar to this:


Once again delete anything that you don't recognise or you think could be a virus.

If anyone else has found out anything about this virus let me know, And for all the people that know how to get information from the virus using sandbox or vm's the direct link is:

Code:


When I tried running it on my VM it ran but didnt do anything, That might have been caused by his IRC being offline or something I'm not to sure.

Thanks for reading and if you need any help removing the virus at all add me on msn: [email protected]

Also, If you did run the virus, Be more careful in the future.

Hypatheticly, Any Question's Feel Free to Contact me.

 

I haven't heard of anyone getting infected here, but thanks for the heads up!

 

They might not even know. depends what the intentions are of the people who spread it.