Messenger Service problem!

Messenger Service problem!

Secure Home | Search | About

Microsoft Applications Security - Microsoft's general security discussions and announcements 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Messenger Service problem! helpme 01-02-2008
Posted by =?Utf-8?B?aGVscG1l?= on January 2, 2008, 3:18 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I'm running a Windows XP Professional without SP2 (i know i should update it)
and i got this message from the messenger service once every minute:

Message from "a computer name" to "my computer name" on "date"
My god! Some one killed ChineseHacker-2 Monitor

I searched the net for solutions and i found out that it should be the
PE_CHIR.B worm. I also downloaded trend micro's special tool against this
worm, but that didn't find any malware on my computer (just like my AVG
antivirus and anti-spyware )...trend micro also says that i should have a
file named runouce.exe in my registry, but i haven't found it where it should
be.

So what should i try? I'm not a computer expert, so if it's possible give
simple (but good) solutions. :) Big thanks!




Posted by Tom [Pepper] Willett on January 2, 2008, 4:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
You need to update to SP2 which disables the service. You apparently also
don't have a proper firewall running to block the incoming traffic.

: I'm running a Windows XP Professional without SP2 (i know i should update
it)
: and i got this message from the messenger service once every minute:
:
: Message from "a computer name" to "my computer name" on "date"
: My god! Some one killed ChineseHacker-2 Monitor
:
: I searched the net for solutions and i found out that it should be the
: PE_CHIR.B worm. I also downloaded trend micro's special tool against this
: worm, but that didn't find any malware on my computer (just like my AVG
: antivirus and anti-spyware )...trend micro also says that i should have a
: file named runouce.exe in my registry, but i haven't found it where it
should
: be.
:
: So what should i try? I'm not a computer expert, so if it's possible give
: simple (but good) solutions. :) Big thanks!
:
:
:



Posted by =?Utf-8?B?aGVscG1l?= on January 2, 2008, 5:59 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have ZoneAlarm firewall which worked fine until now.
About disabling the service...i already read about how to do it, but i would
like to resolve the situation. Disabling the messenger service would not
remove the worm from my PC. Am I right?

"Tom [Pepper] Willett" wrote:

> You need to update to SP2 which disables the service. You apparently also
> don't have a proper firewall running to block the incoming traffic.
>
> : I'm running a Windows XP Professional without SP2 (i know i should update
> it)
> : and i got this message from the messenger service once every minute:
> :
> : Message from "a computer name" to "my computer name" on "date"
> : My god! Some one killed ChineseHacker-2 Monitor
> :
> : I searched the net for solutions and i found out that it should be the
> : PE_CHIR.B worm. I also downloaded trend micro's special tool against this
> : worm, but that didn't find any malware on my computer (just like my AVG
> : antivirus and anti-spyware )...trend micro also says that i should have a
> : file named runouce.exe in my registry, but i haven't found it where it
> should
> : be.
> :
> : So what should i try? I'm not a computer expert, so if it's possible give
> : simple (but good) solutions. :) Big thanks!
> :
> :
> :
>
>
>

Posted by David H. Lipman on January 2, 2008, 6:09 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| I have ZoneAlarm firewall which worked fine until now.
| About disabling the service...i already read about how to do it, but i would
| like to resolve the situation. Disabling the messenger service would not
| remove the worm from my PC. Am I right?
|


Totally insufficient and Messenger Service spam/scams are are generated EXTERNAL
to your PC
and are not caused by worms that may/may not be resident on your PC. The
assumption of a
worm as the culprit is a faux conclusion.

You *NEED* to install WinXP SP2 and all post SP2 updates ASAP!


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by PA Bear on January 2, 2008, 6:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Get the machine fully patched at Windows Update ASAP!
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

helpme wrote:
> I'm running a Windows XP Professional without SP2 (i know i should update
> it) and i got this message from the messenger service once every minute:
>
> Message from "a computer name" to "my computer name" on "date"
> My god! Some one killed ChineseHacker-2 Monitor
>
> I searched the net for solutions and i found out that it should be the
> PE_CHIR.B worm. I also downloaded trend micro's special tool against this
> worm, but that didn't find any malware on my computer (just like my AVG
> antivirus and anti-spyware )...trend micro also says that i should have a
> file named runouce.exe in my registry, but i haven't found it where it
> should be.
>
> So what should i try? I'm not a computer expert, so if it's possible give
> simple (but good) solutions. :) Big thanks!

Similar ThreadsPosted
Virus and/or hacking problem with Windows Messenger August 7, 2008, 7:22 am
Service Log On Account Problem September 19, 2005, 9:41 am
Service Pack 2 problem October 25, 2006, 6:00 pm
Running MSI from a NT service problem September 17, 2008, 9:49 am
MSN messenger August 11, 2005, 8:34 pm
messenger August 24, 2005, 2:08 pm
messenger 7.5 August 26, 2005, 11:35 am
msn messenger January 11, 2006, 9:49 am
MSN Messenger June 21, 2006, 5:19 pm
msn messenger hacked March 20, 2006, 2:19 pm

The site map in XML format XML site map

Contact Us | Privacy Policy