RE: Common Name Virus hides D:\ drive

From: Ezat Tizani <Ezat.Tizani(at)cmc.optus.net.au>
Date: Tue Apr 15 2003 - 17:11:21 EDT

Hi,

Downloading kazaa adds a fair amount of spyware. I suggest you download ad-aware from http://www.lavasoft.de/ and do a quick scan of what you have. I recommend you uninstall kazaa all together and download a version that has the spyware removed. You can download it at www.kazaalite.com . This basically is the program without the spyware. Also comes with a very good hosts file which you can amend to yours.

As for your hard drive.

Check the registry key

Hkey_local_machine/software/Microsoft/windows/currentversion/run

Im sure you will find something obvious to your liking.

Regards,

-----Original Message-----
From: H Carvey [mailto:keydet89@yahoo.com] Sent: Wednesday, 16 April 2003 3:41 AM
To: focus-virus@securityfocus.com
Subject: Re: Common Name Virus hides D:\ drive

In-Reply-To: <000f01c30337$8279a280$1ff938ca@deepak>

>I am in desperate need of help.

I should say so...CommonName isn't a virus, for starters.

>I use Kazaa to download documents, and since the past

2 days I have seen all

>kinds of Spyware like Common Name / Mozilla files /

Eula files etc... being downloaded on my PC.

A lot of that is installed along w/ things like Kazaa

and iMesh, by default. Installing the apps, then

running AdAware and Spybot will usually catch it all.

I'm not sure how "Mozilla files" fits in as "spyware",

though.

>Today my D: Drive has all its files hidden (3GB of

information) all renamed

>/ hidden, and I am not able to see it through DOS /

making the disk a

>Secondary Hard disk by adding another Windows disk as

the Primary disk.. but no luck.

Given what you've said, there's really nothing to

indicate a link between the two events...spyware and

"missing" drive. Have you checked your BIOS settings?

 Does the BIOS recognize the drive?

---

Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the world's premier event for IT and network security experts. The two-day Training features 6 hand-on courses on May 12-13 taught by professionals. The two-day Briefings on May 14-15 features 24 top speakers with no vendor sales pitches. Deadline for the best rates is April 25. Register today to ensure your place. http://www.securityfocus.com/BlackHat-focus-virus

---

---

Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the world's premier event for IT and network security experts. The two-day Training features 6 hand-on courses on May 12-13 taught by professionals. The two-day Briefings on May 14-15 features 24 top speakers with no vendor sales pitches. Deadline for the best rates is April 25. Register today to ensure your place. http://www.securityfocus.com/BlackHat-focus-virus

---

Received on Thu Apr 17 12:27:20 2003