MSN VIRUS

[Ginger]

There is a virus rushing through msn in JPG form now, don't click any links to pics!!!

so far all I have found on it is this link (safe to click lol) http://www.bleepingcomputer.com/forums/topic137142.html

Off to fix Kev's PC....

[action man]

lol how do i see if i have a virus and how do i fix it plz?

[Ginger]

we've run a scan and so far it's coming back with some nasty stuff.

Rick, just run whatever virus software you have, or go to symantec and run one of their online ones.

So far I've not got round to finding removal info as we're still scanning and warning a few people not to click!

[mondatoo]

Whichever virus protection you have run scan and it will check your whole computer for viruses and then warn u of the 1s which are harmful to your comp normally takes bout 45mins - 1hr to run

[technolog]

LOL toolateaments

Get a IM from a certain Colchester Pompey Kev saying 'is this really you?' with a link to (what looked like a photo). I panic thinking he's stumbled on the picture of me, the German Shepherd and the lard-covered dwarf and before I can stop myself I've clicked the link - immediate sinking feeling!

Keep getting a command prompt window titled lux.exe appear and I'm sure it's doing naughty things (although not perhaps on the Alsation/midget scale - obv imo fk my life)

[Shogun112]

Yes Jack, you MSN also sent it to your other contacts...  Me included and The Duke...  Me...  I never opened the file...  The Duke did...  Then it sent to all his contacts...  He has removed MSN and installed it again...

[Laxie]

I got it from Kev and Duke, but didn't open it either time, so hopefully ok.  Whatever it was, it sure did spread fast.

[kinboshi]

Lucky I have no friends.

[technolog]

I ran a virus scan overnight (AVG Free obv) and it found nothing. Does anyone know how to get rid of it? Surely, just uninstalling and re-installing MSN won't rid me of the virus, will it? Though granted, it may stop it spitting nasty messages out to my (ex) mates.

[scotty2hatty]

A friend of mine has had this for a few weeks now - god knows why he doesn't remove it.  Some of the messages it sends are ridic and it's fairly obv it's a virus imo. 

[Ginger]

I ran a virus scan overnight (AVG Free obv) and it found nothing. Does anyone know how to get rid of it? Surely, just uninstalling and re-installing MSN won't rid me of the virus, will it? Though granted, it may stop it spitting nasty messages out to my (ex) mates.

You're correct - uninstalling MSN won't fix the problem.

AVG found a few virus/trojan's/keylogger's on Kev's pc overnight, spybot's Search and Destroy found handfuls of other things too.

I'm now running a scan with Dr.Web (I'd never heard of this one before) and it seems to have picked up about 6 or 7 other nasty bits and pieces that the others missed. After all this is finished I'll go back and do another online scan and see if it's all gone - I'm not holding my breath.

[The_duke]

Yep I clicked the fecking thing -- I am soooooo silly

Anyway  it creates %windir%\msn.com file, which it marks as an system file and hides. After that it creates registry key under HKEY_LOCAL_MACHINE\ Software\ Microsoft\ Windows\ CurrentVersion\ Run    to autorun itself. This key is given name "Microsoft live messenger" and value "msn.com" . When this key is removed via regedit and computer restarted the virus file itself can be removed by going to WINDOWS in C:. Click view, go to folder options tab, click "show hidden files and folders" and click apply. Scroll to the bottom of that "Windows" page, and then work your way up looking for "msn.com" saved as a MS-DOS Application.


http://nz.answers.yahoo.com/question/index?qid=20080325093135AAfgwsy

[action man]

I ran a virus scan overnight (AVG Free obv) and it found nothing. Does anyone know how to get rid of it? Surely, just uninstalling and re-installing MSN won't rid me of the virus, will it? Though granted, it may stop it spitting nasty messages out to my (ex) mates.

You're correct - uninstalling MSN won't fix the problem.

AVG found a few virus/trojan's/keylogger's on Kev's pc overnight, spybot's Search and Destroy found handfuls of other things too.

I'm now running a scan with Dr.Web (I'd never heard of this one before) and it seems to have picked up about 6 or 7 other nasty bits and pieces that the others missed. After all this is finished I'll go back and do another online scan and see if it's all gone - I'm not holding my breath.

thats not the virus thats kevs porno!  he has used the virus to cover up his collection LDO

[Nem]

jotti's virus scan, panda active scan...

[Ginger]

Thanks Nem, I'll try those too, might as well - I've chucked everything else at it lol.

I've removed the actual "msn.com" one but it seemed to be riddled with others within minutes. I know it was a clean machine a week or two ago as I look after all of the pc's in the house myself, but in the last 24 hours I must have cleaned it of at least 20 trojans. I'm still fighting with getting the last 2 off.



Edit: make that 3... sigh!