Another MSN Virus - WATCH OUT

MercilessKiller

Hi hi.
Last night spamming started left right and center from msn contacts giving me a URL and saying "Is that you? :O"

Funny thing is that the url was .RO and firefox wants to download a .pif file when accessing it.

So basically if ANYONE sends you that link do NOT click on it no matter how curious you are. If you do, you'll spam everyone else with it whether you like it or not.

There's been lots of these before but this is a brand new one which started a couple of days ago so watch out

silverbirch_3

I had this last night as well, i didn't click on it but it actually appeared at the top of a word document i was viewing, not on msn. Does this mean its already in my system? Documents kept opening randomly on the pc

MercilessKiller

Unfortunatley you have been infected yes

I don't know the name of the virus as I haven't been infected but you best do a scan. Also download hijack this and post your log.. may be able to detect it through that

silverbirch_3

Already run a full scan this morning but nothing came up virus wise, but loads of adware risks from 888bar which i can't seem to uninstall. Will have to shut puter down as i have to go out, and then start working through it when i get back, start by backing up everything i need to keep as the puter sounded noisy (grinding) on startup this morning so i'm guessing i'll need another harddrive after this...

MercilessKiller

As I said run Hijack This. Do SCAN and Text File, then copy and paste the text file in here...

Then we can tell you how to remove it All may not be lost just yet!!!

And even if the virus has taken off a simple format and reinstallation of windows will fix it. Your hard drive will be fine! (unless of course there are other problems with it)

silverbirch_3

couldn't run hijack this, don't know how to unzip:o but followed the steps in the spyware/malware sticky and run the various scans and they have found and quarantined over 300 items:eek: They are also protecting my puter now and everything seems to be running much faster than usual. Only problem is msn now doesn't work which doesn't bother me but will cause uproar tomorrow when the kids find out:rotfl:

Cumbrian_Male

I've just had this to deal with DD opened the link. See my thread here

Basically got rid of it in safe mode using AVG anti spy which is the re-brand of ewido.
Also had to manually delete a file as it would reload it.
C:\program files\common files\0446D163-0707-2057-0415-05081804002c}\system.dll

The bold number varied so I had 2 or three copies of this as 0 1 2 etc.

Takes a bit of time but can be done.

PS go into msn settings and untick the option which allows hyper links to stop the kids doing it again

silverbirch_3

computer still running much faster today but decided to run a norton scan anyway and its found 73 threats so far and is still going!!

silverbirch_3

spent all day yesterday running the various scans recommended in the spyware sticky in safe mode, plus deleted a couple of files manually as Cumbrian suggested and finally got to the point that the scans were finding nothing. Have run norton again this morning and still nothing so its looks like its gone. Can't believe it as whenever i've had a virus get past norton before its always resulted in puter going away, lots of money, losing everything, and needing a new hard drive.

So a big thank you to everyone that has contributed to the help and advice on here and the step by step guide on the sticky that even i could understand.

And thanks for the suggestion of disabling links in msn, didn't know you could do that, but i did discover you needed to disable it in every account, rather than just once for anyone else reading this.