URGENT: Notepad Virus ???

[meli...@yahoo.com]

Hi Everybody

Does someone know about a virus that is connected (in any way) with the
Notepad ?

If this virus exist, how can I delete it ? What are its damages ?

Thanks in advance.

/Melita

Sent via Deja.com http://www.deja.com/
Before you buy.

[Jeffrey A. Setaro]

In article <8o3qnb$861$1...@nnrp1.deja.com>, meli...@yahoo.com says...
> Hi Everybody
>

Hi ya-

> Does someone know about a virus that is connected (in any way) with the
> Notepad ?
>

That specifically targets notepad no... Windows Notepad (notepad.exe)
is a Windows executable there are at least a few dozen viruses that
could infect it or any other Windows executable.

> If this virus exist, how can I delete it ?

Why do you think you have a virus? What symptoms are you experiencing?
Have you run an anti-virus program? If so what did it report?

> What are its damages ?
>

Unknown without more information.

> Thanks in advance.
>

Your welcome. HTH.

--
Cheers-

Jeff Setaro
jase...@sprynet.com
http://home.sprynet.com/~jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99

[AkHibby]

In article <8o3qnb$861$1...@nnrp1.deja.com>,
meli...@yahoo.com wrote:
> Hi Everybody

>
> Does someone know about a virus that is connected (in any way) with
the
> Notepad ?
>

> If this virus exist, how can I delete it ? What are its damages ?
>
> Thanks in advance.
>
> /Melita
>
http://vil.nai.com/villib/dispvirus.asp?virus_k=98775 try the Cleaner
from http://www.moosoft.com.

Ian

[PaX [SlaM]]

>>>>Does someone know about a virus that is connected (in any way) with the
Notepad ?
<<<<<<<<<<<<<<<<<<<<<<<<<

Notepad.exe can be infected but plain text cannot..

PaX [SlaM]

[PaX [SlaM]]

[PaX [SlaM]]

[Nick FitzGerald]

meli...@yahoo.com wrote:

> Does someone know about a virus that is connected (in any way) with the
> Notepad ?

Virus?

No -- there is the Qaz Trojan Horse, which copies Notepad.exe to
Note.com than installs itself as Notepad.exe though. That's the
only thing I can think of that is Notepad-specific.

> If this virus exist, how can I delete it ? What are its damages ?

You can read about Qaz on most antivirus web sites. A few you may
wish to try are:

http://www.cai.com/virusinfo/encyclopedia/descriptions/qaz.htm

http://www.f-secure.com/v-descs/qaz.htm

http://vil.nai.com/villib/dispvirus.asp?virus_k=98775

http://www.sarc.com/avcenter/venc/data/qaz.trojan.html

--
Nick FitzGerald

[shaft_...@my-deja.com]

I stumbled across it. This explains how it affected my computer:
http://www.deja.com/getdoc.xp?AN=660597133.1

There are a couple of current threads in alt.comp.virus with subjects
"QAZ.WORM -- how does it spread?" and "Questions about Qaz.Trojan, TIA!"
that deal with this virus.

And McAfee, Symantec, and Computer Associates all have this virus
documented in their AV descriptions and in their current updates.

In article <8o3qnb$861$1...@nnrp1.deja.com>,
meli...@yahoo.com wrote:
> Hi Everybody
>

> Does someone know about a virus that is connected (in any way) with
the
> Notepad ?
>

> If this virus exist, how can I delete it ? What are its damages ?
>

> Thanks in advance.
>
> /Melita

[Nick FitzGerald]

I wrote:

> Virus?
>
> No -- there is the Qaz Trojan Horse, which copies Notepad.exe to
> Note.com than installs itself as Notepad.exe though. That's the
> only thing I can think of that is Notepad-specific.

Hmmmmmm -- now the first coffee has kicked in, it is much clearer
that this does meet the requirements of virality.

So, despite web pages calling it a Trojan and others calling it a
worm, I would class Qaz as a virus.

--
Nick FitzGerald

[Eric Chien]

Didn't see the original post, but my guess is maybe you are having
problems with W32.HLLW.Qaz.A

See:
http://www.sarc.com/avcenter/venc/data/qaz.trojan.html

...Eric

On Thu, 24 Aug 2000 15:32:21 -0400, Jeffrey A. Setaro
<jase...@sprynet.com> wrote:

>In article <8o3qnb$861$1...@nnrp1.deja.com>, meli...@yahoo.com says...
>> Hi Everybody
>>
>
>Hi ya-
>

>> Does someone know about a virus that is connected (in any way) with the
>> Notepad ?
>>
>

>That specifically targets notepad no... Windows Notepad (notepad.exe)
>is a Windows executable there are at least a few dozen viruses that
>could infect it or any other Windows executable.
>

>> If this virus exist, how can I delete it ?
>

>Why do you think you have a virus? What symptoms are you experiencing?
>Have you run an anti-virus program? If so what did it report?
>

>> What are its damages ?
>>
>

[cqu...@iafrica.com]

On Thu, 24 Aug 2000 22:23:08 +0100, "PaX [SlaM]" <P...@SlaM-VT.org.uk>
wrote:

>>>>>Does someone know about a virus that is connected (in any way) with the
>Notepad ?

QAZ specifically targets Notepad...

http://www.datafellows.com/v-descs/qaz.htm

...but any .exe infector could infect it too.

>-------------- ---- --- -- - - - -
Gender Bummer #56 (collect them all!):
"Gee, your husband's put on weight.
What *are* you cooking for him?"
>-------------- ---- --- -- - - - -

[luc...@my-deja.com]

My pc has just been infected with this virus. I've quarantined and deleted
the affected file (notepad.exe), found the re-named file (note.com) and
restored it to its original name, but haven't been able to follow Norton's
next step, which is to delete a specified registry key, because I don't know
where to find it on my system (Win98SE). Where do the registry files
actually live? Many thanks.

-Lucrezia

In article <39a69c3e...@news.symantec.com>,

ecc...@usa.net (Eric Chien) wrote:
> Didn't see the original post, but my guess is maybe you are having
> problems with W32.HLLW.Qaz.A
>
> See:
> http://www.sarc.com/avcenter/venc/data/qaz.trojan.html
>
> ...Eric
>
> On Thu, 24 Aug 2000 15:32:21 -0400, Jeffrey A. Setaro
> <jase...@sprynet.com> wrote:
>
> >In article <8o3qnb$861$1...@nnrp1.deja.com>, meli...@yahoo.com says...
> >> Hi Everybody
> >>
> >
> >Hi ya-
> >

> >> Does someone know about a virus that is connected (in any way) with the
> >> Notepad ?
> >>
> >

> >That specifically targets notepad no... Windows Notepad (notepad.exe)
> >is a Windows executable there are at least a few dozen viruses that
> >could infect it or any other Windows executable.
> >
> >> If this virus exist, how can I delete it ?
> >
> >Why do you think you have a virus? What symptoms are you experiencing?
> >Have you run an anti-virus program? If so what did it report?
> >
> >> What are its damages ?
> >>
> >
> >Unknown without more information.
> >
> >> Thanks in advance.
> >>
> >
> >Your welcome. HTH.
> >
> >--
> >Cheers-
> >
> >Jeff Setaro
> >jase...@sprynet.com
> >http://home.sprynet.com/~jasetaro/
> >PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99
>
>

Sent via Deja.com http://www.deja.com/
Before you buy.

[Richard C]

Run Regedit.exe in the Windows folder. Be careful though, you don't want to
mess up the registry.

I had this worm, too. I also run Win98SE and the registry key mentioned did
not exist.

<luc...@my-deja.com> wrote in message news:8oqpka$8rk$1...@nnrp1.deja.com...

[BlueStar]

Go to the start menu, then run, and type 'regedit' in the box. Regedit
isn't the most user friendly of apps, but do a search for the bit you're
told to modify and you should get by.

--
¤*.¸¸.·´¨`»*«´¨`·.¸¸.*¤
BlueStar
gazwhiteATbigfootDOTcom
ICQ: 26977739
¤*.¸¸.·´¨`»*«´¨`·.¸¸.*¤

Support Ma'am - Movement against the monarchy:
http://www.geocities.com/CapitolHill/Lobby/1793/Index.html

<luc...@my-deja.com> wrote in message news:8oqpka$8rk$1...@nnrp1.deja.com...

[fritzbrause]

you must find a specific key in the registry .. if you need any further
assistance please mailme ...
the_fri...@gmx.de

i got these virus too ...

<luc...@my-deja.com> schrieb in im Newsbeitrag:
8oqpka$8rk$1...@nnrp1.deja.com...