Welcome, Guest: Register On Nairaland / LOGIN! / Trending / Recent / New
Stats: 3,155,020 members, 7,825,207 topics. Date: Sunday, 12 May 2024 at 09:08 AM

Have You Got The Coolpics Virus? - Computers - Nairaland

Nairaland Forum / Science/Technology / Computers / Have You Got The Coolpics Virus? (1830 Views)

Shortcut Virus Removal From Windows 7 PC / Drop Your system Specifications. Lets See Who Got The Beast / "My Removable Device" Shortcut Virus - Help (2) (3) (4)

(1) (Reply) (Go Down)

Have You Got The Coolpics Virus? by Ralvy(m): 2:18pm On Jul 28, 2007
Hello Nairalanders,
I came across this crazy virus,  It's a minor one, if you've got it - Read this for removal methods,
How does it work?
- it first starts its life journey on one internet website. viewers of this site will then receive the virus. The virus will execute itself and kill alot of processes in your CPU. then it tries to make copies of itself on all removeable media that you plug into your computer, which will then be spread on every computer in which you inserted your media. From ym messages to flash disks, from memory cards to camera memory sticks, making it one of the most common virus that i’ve encountered.

well, because The coolpics virus is a virus that does the following:

changes your ym stat message
spams your ym contact list with a tricky link to where the virus is located
disables your task manager
disables your regedit
disables your msconfig
disables the run option from the start menu
disables AVG and its updater
disables your run command
hides the ‘Folder Options’ in windows explorer. So that users will not see hidden files and system files
disables the ‘Find’ command so you will have a hard time finding the virus.
and many more…

Here's a way to get rid of the virus;

Place this link in your address bar: C:\WINDOWS\system32\drivers\etc that's if windows is installed on Drive C on your computer, You will find a file named hosts. Remove the read-only attribute from by right clicking on the file and selecting properties. Open the file with note pad and you will see a list of web pages that you are not allowed to visit meaning your computer has been barred from visiting those pages. Yow get to see links like this;

72.36.143.120               localhost
72.36.143.120               8streetlatinas.com
72.36.143.120               www.8streetlatinas.com
72.36.143.120               bandbrothers.com
72.36.143.120               www.bandbrothers.com

and more,

Find attached: hosts.jpg to see what it looks like

Go to the end and add yours;

127.1.0.0                       http://thecoolpics.net/hot.jpg
127.1.0.0                       http://thecoolpics.net

Find attached host_edited.jpg to see what it should look like
Now save the file and apply the read only attribute to protect it.

At this point, u have suceeded in blocking your computer from visiting the link to where this file (virus) is downloaded. But you haven't got the virus out.

I'm sure you would have noticed that the "run" option is not available. This is caused by the registry.
Find attached "no_run.jpg"
This is what you should do.
Open the command prompt and type "gpedit.msc" (without quotes)

The above command should open a box with group policy.
Expand as illustrated in fig.1 below

Browse through the group policy and re-enable every option that has been disabled.
Note that all you do is entered into this location on the registry editor " \Software\Policies" or "Software\Microsoft\Windows\CurrentVersion\Policies" so You can export the registry files and send to a frend if he is infected. without him going through the stress above.

Note that the virus is spreading rapidly like wild fire.

Do not open links from your yahoo messenger that you do not know.

iNerve, Ihope this helps, If you experience more problems, don't hesitate to e-mail me:
geezlenator@gmail.com

Re: Have You Got The Coolpics Virus? by Ralvy(m): 2:22pm On Jul 28, 2007
This is how the messsage that has the infection get to you through yahoo messenger,
Find attached: WORM_SOHANAD_AE_img1.

I will upload a PDF file containing these remobal methods for your convinience later,  wink

Re: Have You Got The Coolpics Virus? by hayprof(m): 8:43pm On Jul 28, 2007
Thanks mehn, i shuld try this when i get to the office on Monday.
I av this virus on my office Pc.
Thanks Ralvy.
Re: Have You Got The Coolpics Virus? by tizzle(m): 5:27am On Jul 30, 2007
nice one. had this same problem but its too late. couldn't get rid of the virus so i had to format my system. wish i knew this b4 then.
Re: Have You Got The Coolpics Virus? by Nobody: 9:45am On Jul 30, 2007
this has been discussed before:

https://www.nairaland.com/nigeria/topic-46473.0.html

in a reply to a similar post, someone posted link to a standalone cleaner.(i can't find it, though).
Re: Have You Got The Coolpics Virus? by Ralvy(m): 6:41pm On Jul 30, 2007
For you all that read mt blog
http://www.nerve-it..com/
This is the latest Topic I have posted,
Pls when ur adding the virus sites to disable access to those sites from ur computer;
Add the following;

http://thecoolpics.net/dontclick.jpg
http://thecoolpics.net/error.jpg

Remember not to click the links above,

(1) (Reply)

Quickbooks Network And Database Security Problem / 6 Ways To Keep Your Computer Working At Optimum Performance / Spectranet 4G Lte Vs Swift 4G Lte

(Go Up)

Sections: politics (1) business autos (1) jobs (1) career education (1) romance computers phones travel sports fashion health
religion celebs tv-movies music-radio literature webmasters programming techmarket

Links: (1) (2) (3) (4) (5) (6) (7) (8) (9) (10)

Nairaland - Copyright © 2005 - 2024 Oluwaseun Osewa. All rights reserved. See How To Advertise. 16
Disclaimer: Every Nairaland member is solely responsible for anything that he/she posts or uploads on Nairaland.