MSN virus

[Smith]

my friend sent me a link and I trust her so I clicked on it but I quickly realised it was a virus I deleted it and ran avg (free edition) but it didn't find anythin, I know it's still there, any help guys?

[Obama Yo Momma]

where did you click it at?

[Smith]

well, not sure if I understand the question but basiclly I went on and she sent me the link so I clicked on it

[Obama Yo Momma]

well, not sure if I understand the question but basiclly I went on and she sent me the link so I clicked on it


wait what happened when you clicked the link?

[Smith]

it came up with a download message and, like an idiot, I clicked yes

[LordBhorak]

Well... I'm allways sure to check if my friends send me omnious links. The best way is to ask "What's that?"

EDIT: And the most secure way is to reinstall windows. You'll never know if it's a keylogger or something. And with such viruses, you might lose your Steam acco etc.

[Smith]

she wouldn't be able to answer cause of the virus

[LordBhorak]

she wouldn't be able to answer cause of the virus

Incorrect. All my friends have been able to answer me... and if she doesn't answer, then don't click

[Goldkills]

try running something like bit defender the trial is free and it works.

[Dre]

i know exactly what your talking about.

see those are "machines" thats on your friend account. like when they log in, it dont be your friend, it be a machine that knows your friends username and password.

and they will send you a messenge like this
"hey there, i just went to this site and they gave me a free ipod for simply filling out a survey, you should do it also *link here*"

theres one of my friend i dont think even uses his instant messenger anymore, but he's always logged in and it ALWAYS sends me some messege like that.

[l4dfan]

just saving a file doesn't actually execute it. if you saved it and deleted it without opening it, you're probably fine.

those viruses that go through msn are well known and easily picked up by scanners, i doubt they'd go undetected. you should run a few different virus, spyware and rootkit scanners though.

i suggest running "hijackthis" (google) also, and parsing the log it generates here (http://www.hijackthis.de). you can get a good idea of what the processes and start up entries on your system are by doing that.

[darkmessiah]

I actually sent a link consisting of great porn to a friend of mine. He and I use that site all the time but he clicked the link and got some virus that prints out porn, very scary. We had a good laugh after that but he insisted that HE only give the good porn links now.

[Darkness]

run a different anti virus program

[Epifon]

Re install msn. the virus is hideing in isde the msn files .

[Smith]

my friend uninstalled msn but it didn't work

[Smith]

try running something like bit defender the trial is free and it works.
C:\ Windows\fxstaller.exe(full dump) thats what it found plus that but with memory dump at the end but it was unable to disinfect it

[YouGotDone]

download Spybot: Search and Destroy (scans and deletes all nasty shit)

works everytime

[Eagle112]

She sounds like a bitch....

[Hunk]

About 6 months ago someone on my MSN list sent me a RAR file with a message saying 'Is this picture you?'
I was stupid enough to think 'wtf' and download and open the RAR file. When I opened it nothing happened, or so I thought. A couple minutes later other people on my MSN list (especially women) started posting me asking why I wanted nude pictures of them, including my sister.

My MSN had been hijacked and the person was using my account to continue distributing the faux RAR file to I assume gain access to other people's MSN contact lists. Fortunately I made a copy and paste notation that I sent to everyone on my list telling them my account was hijacked and not to accept any file transfer requests. Whoever it was who hijacked my account continued trying to spread the file for an hour or so. I kept telling people on my list to let me know when he was trying to send the file to them or get them to go into private chats.

I quickly opened task manager and saw a program called something like gyooglio.exe running. Since I constantly monitor my background tasks I immediately recognized this as something that shouldn't be there.
Spybot didn't register it but Adaware immediately picked it up as something malign, but didn't know what it was and actually prompted me to send them a copy of the file to their headquarters.
I could not get rid of it. Disabled it in task manager and through msconfig and it kept coming back on after a reboot. I finally went into regedit and found it's registry and deleted it. While the program remained on my computer I was able to at least disable it to the point where it couldn't function properly. After deleting the registry of it I was able to delete the exe of it without it reappearing again, although in task manager its box still remained in the check list.

I have since done a reformat and it's long gone and I haven't had anyone on my contact list report any bizarre posts of file transfers. Now as a policy I don't even accept file transfers through MSN since whoever sent me the file had hijacked someone else on my contact list to do it.

[Smith]

I thought I had it, I uninstalled windows live and installed again nothing happened when I went on, started talking to my friend, for about a couple of mins nothin happened then the wee boxes came up as it passed the link on. DAMN was gutted.

[Darkness]

run a different anti virus program

Removing msn will do nothing about the virus.

run a different anti virus program

A different anti-virus software will help you.

run a different anti virus program

AVG is crap, use something useful.

run a different anti virus program

heres a link since you dont seem to be able to help yourself: http://www.superantispyware.com/

[darkmessiah]

^ Weird post.

[Smith]

I GOT IT, BAS@$%D DIDN'T SEE THE TRIAL VERSION OF REGISTRY MECHANIC COMING. If anyone reading this post go to pc tools.com and and download the registry mechanic.