UKBouldering.com

Possible Virus through MSN Messenger? (Read 2473 times)

Drew

Offline
  • *****
  • forum hero
  • Am I really a
  • Posts: 1739
  • Karma: +36/-4
Possible Virus through MSN Messenger?
March 25, 2008, 08:27:58 pm
Anyone know about a virus coming through MSN messenger where one of your friends sends a message saying "looks like you" or something similar. You click the link then it downloads an MS-DOS file or something  :oops:

Anyway, I've tried to delete it, and I'm running an AVG scan as I type this. Anyone know about this possible virus? Anyone know what I could better protect my laptop with, other than AVG? I'm not willing to spend much money, if any. I'd rather just format my hard drive every so often.

Jim

Offline
  • *****
  • Trusted Users
  • forum hero
  • Mostly Injured
  • Posts: 8629
  • Karma: +234/-18
  • Pregnant Horse
    • Bouldering POI's for tomtom
I just use avg free and have never had any problems. It could be adware/malware
Don't use messenger or the like so haven't heard of anything. Try googling it?

GCW

Offline
  • *****
  • forum hero
  • No longer a
  • Posts: 8172
  • Karma: +364/-38
I use AVG too, but on my old system it really slows things down compared to things like Mcafee.  Probably just an old system but it can be very annoying.

I haven't heard anything about this one, but it sounds like the old Picture virus.

GCW

Offline
  • *****
  • forum hero
  • No longer a
  • Posts: 8172
  • Karma: +364/-38
This is more recent.

Drew

Offline
  • *****
  • forum hero
  • Am I really a
  • Posts: 1739
  • Karma: +36/-4
Looks like it's pretty new. Well... these guys have only just received it

http://ca.answers.yahoo.com/answers2/frontend.php/question?qid=20080325093135AAfgwsy

GCW

Offline
  • *****
  • forum hero
  • No longer a
  • Posts: 8172
  • Karma: +364/-38
Yeah, some good info in that thread

Quote from: Nighthawk
It creates %windir%\msn.com file, which it marks as an system file and hides. After that it creates registry key under

HKEY_LOCAL_MACHINE\ Software\ Microsoft\ Windows\ CurrentVersion\ Run to autorun itself. This key is given name "Microsoft live messenger" and value "msn.com" . When this key is removed and computer restarted virus file itself can be removed for example from command line by typing

del /ash %windir%\msn.com

andy_e

Offline
  • *****
  • forum hero
  • Posts: 8836
  • Karma: +275/-42
"Hi, is it OK if I upload this photo of us 2 on to facebook?"

Is it me or has this virus become a hell of a lot more widespread recently?

 

SimplePortal 2.3.7 © 2008-2024, SimplePortal