To everyone on my AIM Buddy list! (please read!! AIM virus!!)

[Omnislash024]

A person on my buddy list inadvertently sent a file through AIM that was a trojan horse virus. The virus spreads itself by automatically sending itself through AIM buddy lists. It will send you a link called "lockx.exe". DO NOT DOWNLOAD THIS FILE AND OPEN THIS FILE.

At the moment I don't even know how to get rid of it. It opened up a whole bunch of viruses and keeps wanting to access the internet, but my firewall is blocking it. Tried deleting the file, but that didn't work. Scanned my computer but it said I didn't have any viruses. Still I'm not taking chances.

Any help would be appreciated and let other people know about this Virus please!!!

[Crimson Knight]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

Guess it's a good thing I'm not friends with you huh?

That sucks though, hope you can get rid of it.

[Funk]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

I stopped using AIM LONG ago.

[Crimson Knight]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

Guess it's a good thing I happened to get bored of it years ago as well.

[Vonwert]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

I haven't recieved anything.

[MasterSlowPoke]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

Oh, so photo files don't end in exe?

[Crimson Knight]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

I guess.

[Omnislash024]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

This one is a pretty bad one.

Process File: lockx or lockx.exe
Process Name: W32/Sdbot-ADD worm

Description:
lockx.exe is a process which is registered as the W32/Sdbot-ADD worm. This virus is distributed via the Internet through e-mail and comes in the form of an e-mail message, in the hopes that you open it’s hostile attachment. The worm has it’s own SMTP engine which means it gathers E-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately.
For More Information About lockx.exe - Get WinTasks 5 Pro Now!

Author: na
Part Of: W32/Sdbot-ADD worm

System Process: No
Background Process: Yes
Uses Network: Yes
Hardware Related: No
Common Errors: N/A
Memory Usage: N/A ( Free Up Memory )

Security Risk (0-5): 4
Spyware: No ( Remove )
Adware: No ( Remove )
Virus: Yes ( Remove )
Trojan: Yes ( Remove )


The best part is, it may have overwritten my virus definitions and such just so the anti-virus can't detect it.

[Crimson Knight]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

I think any virus author should just die a slow, horrible death. Forever.

[Omnislash024]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

if anyone could help with a solution, i'd greatly appreciate it.

Right now i've done all thsese system scans and it says nothing. Yet a program that i deleted somehow still exists and keeps wanting to get through the firewall.
(even though the comp says it doesn't exist).

edit: on the phone with symantec and even they don't seem to know the prob.

second edit: Well, they need to send me a program via my e-mail to help get rid of all the corrupted files. NAsty... nasty little virus...

I feal really dumb for opening it to begin with. It came via Aim from a guy who always sends me cool links and didn't think anything of it.

[Snarf]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

Housecall

[Omnislash024]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

It's getting ugly. Antivirus found something else today.

Hacktool.Rootkit comprises a set of programs and scripts that work together to allow attackers to break into a system. If Hacktool.Rootkit is detected on a system, it is very likely that an attacker has gained complete control of that system. All files that are detected as Hacktool.Rootkit should be deleted. Infected systems may need to be restored from backups or patched to restore security.



Type: Trojan Horse
Infection Length: Varies



Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP





protection

[Redneck 2000]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

lockx.exe

Let's talk about Lost in this topic.

[Valkysas]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

that sounds like one hell of an asshole virus you got there.

switch to trillian or something, dont use AIM anymore. obviously not worth it.

[IRC]

Re: To everyone on my AIM Buddy list! (please read!! AIM virus!!)

I say we ban Omni until he gets his computer fixed. You know just to be safe.