jeefo virus

Mavix

Senior Member
Joined
Aug 14, 2006
Messages
759
Reaction score
3
Location
Durban
Has anyone ever heard of or had the jeefo virus on their computer?
 
http://www.sophos.com/security/analyses/w32jeefoa.html

W32/Jeefo-A infects Windows PE executables with an extension of EXE and a filesize greater than 102,399 bytes, in all folders of all fixed drives C: to Z:.

The virus runs continuously in the background, infecting files at periodic intervals.

When an infected file is run, the virus dropper is extracted to the Windows folder as SVCHOST.EXE and the virus disinfects the host executable, although not all infected files will be successfully returned to their original state.
.
 
Hmmm...it sounds similar to the Tenga virus, which also infects and corrupts all exe's and eventually windows itself
 
Pesky bugger - had it at one of my clients.

Caught it in time, otherwise the damage would have been worse. All in all it damaged one application which tried to reinstall itself, and fails - over and over again.

That I fixed, but was glad that it was only one application which was affected.

Pesky bugger.

Regards

Libs
 
Boot with linux disk and install. Fixes any win32 virus :D
 
This virus once destroyed all the data i had on all my disks. It attacks your .exe files, so you end up losing them all, and have a few hundred gigs of useless data.
 
omg out of all the other software that i have on my computer to protect my files i got two of those buggers on my system!! :eek:
 
gy virus

I have found that several pc's at my campus have a virus that creates .exe files in almost all folders. The .exe file looks like a Folder icon but in actual fact it is a exe. It also has a company name "gy", It also attaches it self to removable storage devices and I have found that there is a process running with the name "86786.com", it first appeared last week, we cleaned the PC's that had the virus (NOD232) even had it formatted, but the nasy bugger is back. If anyone knows where this virus originates from or who has been infected Please let me know.
 
Ye that lame virus hitched a ride on my flashdrive from UCT. I think it came from Scilab C in the R.W. James Building. I'm sure I've probably spread it to the MCB building as well.
 
Holy zombie revival man
 
Last edited:
Ye that lame virus hitched a ride on my flashdrive from UCT. I think it came from Scilab C in the R.W. James Building. I'm sure I've probably spread it to the MCB building as well.
I'm sure that scilab was absolutely rife with all sorts of viruses including human ones
 
Top
Sign up to the MyBroadband newsletter
X