|
Posted by =?Utf-8?B?Q2hhcmx5RGVGcmFuY2U= on September 13, 2007, 10:04 pm
If you were Registered and logged in, you could reply and use other advanced thread options
HI people,
While chatting with a friend via Windows Live Messenger v8.1 , i received
from him a message saying:" I uploaded new photos of me, check them here"
with a file called " img0012-www.photostorage.zip " .....since i trust this
friend ,i clicked on the file to open it , SUDDENLY many windows of all my
contacts who are online has been opened automatically, and the same message
above that i received was sent to every contact.
So i quickly closed my messenger by Ctrl+Alt+Del since it wasn't responding,
coz i new that was a Virus, and i can assure u its new since i searched for
it on the net and in all Forums, and nobody talked about it or know anything
about that.
So, i searched for it on my computer, and i found it in Windows directory,so
i deleted it, but it looks it always reappear and causes my Messenger to send
messages with the virus (btw, the messages are not the same always, they
change from contact to contact, like saying "hey, just watch my new photos",
or if u don't check my photos i'll be mad of you" etc etc etc etc ).
So please, did anyone heard about this new virus, coz i really need some
help since i'm unable to Sign in to my messenger coz i'm afraid to spread it
more and more.
P.S: i do have the file as a Zip file in my Windows Directory if someone
specialist wants to check it.
THANKSSSS
|
|
Posted by Malke on September 13, 2007, 11:14 pm
If you were Registered and logged in, you could reply and use other advanced thread options
CharlyDeFrance wrote:
> HI people,
>
> While chatting with a friend via Windows Live Messenger v8.1 , i received
> from him a message saying:" I uploaded new photos of me, check them here"
> with a file called " img0012-www.photostorage.zip " .....since i trust this
> friend ,i clicked on the file to open it , SUDDENLY many windows of all my
> contacts who are online has been opened automatically, and the same message
> above that i received was sent to every contact.
>
> So i quickly closed my messenger by Ctrl+Alt+Del since it wasn't responding,
> coz i new that was a Virus, and i can assure u its new since i searched for
> it on the net and in all Forums, and nobody talked about it or know anything
> about that.
>
> So, i searched for it on my computer, and i found it in Windows directory,so
> i deleted it, but it looks it always reappear and causes my Messenger to send
> messages with the virus (btw, the messages are not the same always, they
> change from contact to contact, like saying "hey, just watch my new photos",
> or if u don't check my photos i'll be mad of you" etc etc etc etc ).
>
> So please, did anyone heard about this new virus, coz i really need some
> help since i'm unable to Sign in to my messenger coz i'm afraid to spread it
> more and more.
>
> P.S: i do have the file as a Zip file in my Windows Directory if someone
> specialist wants to check it.
You can send the file to Virus Total for identification.
http://www.virustotal.com/
There are quite a few viruses spread by instant messaging programs. What
antivirus do you have installed? In addition to sending the file to
Virus Total, in the meantime you can try scanning with David Lipman's
Multi_AV. Follow instructions to do all scans in Safe Mode. Please see
the special Notes regarding using Multi_AV in Vista.
http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download
The download is hosted on a German site but the application is English
and the instructions included are in English.
Let us know what Virus Total reports.
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
|
|
Posted by =?Utf-8?B?Q2hhcmx5RGVGcmFuY2U= on September 14, 2007, 6:10 am
If you were Registered and logged in, you could reply and use other advanced thread options
i sent the file to VirusTotal, they analyse it, and it seems that my Avast
Antivirus is between those who can't identify the new virus called:"
img0012-www.photostorage " coz only some antiviruses are able to detect
it.....this is the Virustotal result:
File IMG-0012.zip received on 09.14.2007 11:53:50 (CET)
Current status:finished
Result: 24/32 (75%)
So i think i'm gonna use AVG antivirus for that....Thanks Malke :)
"Malke" wrote:
>
> You can send the file to Virus Total for identification.
>
> http://www.virustotal.com/
>
> There are quite a few viruses spread by instant messaging programs. What
> antivirus do you have installed? In addition to sending the file to
> Virus Total, in the meantime you can try scanning with David Lipman's
> Multi_AV. Follow instructions to do all scans in Safe Mode. Please see
> the special Notes regarding using Multi_AV in Vista.
>
> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
> http://pcdid.com/Multi_AV.htm - download
>
> The download is hosted on a German site but the application is English
> and the instructions included are in English.
>
> Let us know what Virus Total reports.
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>
|
|
Posted by Milo \(MSPSS\) on September 14, 2007, 8:55 am
If you were Registered and logged in, you could reply and use other advanced thread options
given off by you friends off the Instant Messenger we have seen same
instance as yahoo messenger few months ago - better yet verify first with
your friends whom you are chatting with if they indeed sent off this link to
you.
General instance of this concern is you friends instant messenger was
compromised and is sending out involuntarily the link to everyone in their
address list once they are online.
For further inquiry and assistance - call 866 727 2338 ( Microsoft
Security ) US/CANADA
> HI people,
>
> While chatting with a friend via Windows Live Messenger v8.1 , i received
> from him a message saying:" I uploaded new photos of me, check them here"
> with a file called " img0012-www.photostorage.zip " .....since i trust
> this
> friend ,i clicked on the file to open it , SUDDENLY many windows of all my
> contacts who are online has been opened automatically, and the same
> message
> above that i received was sent to every contact.
>
> So i quickly closed my messenger by Ctrl+Alt+Del since it wasn't
> responding,
> coz i new that was a Virus, and i can assure u its new since i searched
> for
> it on the net and in all Forums, and nobody talked about it or know
> anything
> about that.
>
> So, i searched for it on my computer, and i found it in Windows
> directory,so
> i deleted it, but it looks it always reappear and causes my Messenger to
> send
> messages with the virus (btw, the messages are not the same always, they
> change from contact to contact, like saying "hey, just watch my new
> photos",
> or if u don't check my photos i'll be mad of you" etc etc etc etc ).
>
> So please, did anyone heard about this new virus, coz i really need some
> help since i'm unable to Sign in to my messenger coz i'm afraid to spread
> it
> more and more.
>
> P.S: i do have the file as a Zip file in my Windows Directory if someone
> specialist wants to check it.
>
> THANKSSSS
|
|
Posted by =?Utf-8?B?RS5SLklOQy5UcmFjeTE= on September 28, 2007, 10:56 am
If you were Registered and logged in, you could reply and use other advanced thread options
"CharlyDeFrance" wrote:
> HI people,
>
> While chatting with a friend via Windows Live Messenger v8.1 , i received
> from him a message saying:" I uploaded new photos of me, check them here"
> with a file called " img0012-www.photostorage.zip " .....since i trust this
> friend ,i clicked on the file to open it , SUDDENLY many windows of all my
> contacts who are online has been opened automatically, and the same message
> above that i received was sent to every contact.
>
> So i quickly closed my messenger by Ctrl+Alt+Del since it wasn't responding,
> coz i new that was a Virus, and i can assure u its new since i searched for
> it on the net and in all Forums, and nobody talked about it or know anything
> about that.
>
> So, i searched for it on my computer, and i found it in Windows directory,so
> i deleted it, but it looks it always reappear and causes my Messenger to send
> messages with the virus (btw, the messages are not the same always, they
> change from contact to contact, like saying "hey, just watch my new photos",
> or if u don't check my photos i'll be mad of you" etc etc etc etc ).
>
> So please, did anyone heard about this new virus, coz i really need some
> help since i'm unable to Sign in to my messenger coz i'm afraid to spread it
> more and more.
>
> P.S: i do have the file as a Zip file in my Windows Directory if someone
> specialist wants to check it.
>
> THANKSSSS
|
| Similar Threads | Posted | | avg found a virus called downloader.tibs | October 4, 2006, 5:06 pm |
| MSN Messenger virus | October 4, 2006, 6:15 pm |
| Messenger Virus | November 5, 2006, 12:43 am |
| Virus and/or hacking problem with Windows Messenger | August 7, 2008, 7:22 am |
| got this trojan in a file called mscmsr.dll - don't know where it came from... | March 6, 2008, 8:35 pm |
| "Messenger Service" pop up box | July 31, 2006, 11:27 pm |
| Messenger Service Popups | July 19, 2005, 5:33 am |
| URLs sent from Contacts who are offline via Windows Live Messenger 8.1 | February 11, 2008, 8:02 am |
| WARNING: Winfixer and Errorsafe [AKA Vundo] being distributed via WL/MSN Messenger banner ads | February 18, 2007, 10:53 am |
| HELP: Virus is preventing me from installing anti virus software!! | January 11, 2007, 2:17 am |
|
XML site map