MSN Virus Warning

DarkHououmon · **on:** February 08, 2008, 01:42:09 AM

I hope this is the right place to put this...

Anyway, today I have noticed a worm has been spreading through MSN. It sends itself through an instant message saying "this really looks like you" and offers a link containing an e-mail address. If you recieve any message like that, do not click it. It contains a virus.

A few of my friends have already fallen prey to the virus. So far all I know about it is that it causes the person to send the link to all online contacts, makes them sign out of MSN and possibly makes their computer "flip out".

One friend managed to fix it by System Restore, and another by changing his/her password, cause apparently the virus can't work if the password is changed.

People here probably already know about this, but I figured I put up the warning after seeing how much it spread with the people on my own buddy list.

I did highlight and copy n paste the link in Opera, but did not become infected because Opera pretty much saved me. It came up with a message asking me how I wanted to open it, and when I noticed the type of file, I quickly cancelled, and closed the tab, and did not suffer any side effects.

Has anyone else here been struck? And does anyone know any other ways to fix the problem?

Kor · **Reply #1 on:** February 08, 2008, 02:05:46 AM

I've not been struck, but it's great that you are warning folks like this, it may save many from being struck & effected.

DarkHououmon · **Reply #2 on:** February 08, 2008, 02:09:17 AM

Yeah.

action9000 · **Reply #3 on:** February 08, 2008, 02:11:50 AM

Thank you very much Darkhououmon for the information! I shall definitely be careful of this.

DarkHououmon · **Reply #4 on:** February 08, 2008, 02:15:55 AM

You're welcome.

UDPATE! : A friend of mine had tried the password change himself, and the virus persisted. If the password change does not work for you, try a System Restore. If that doesn't work..then I dunno. It could be a trojan. o.O

Oh and run an antivirus too. That's always a good idea.

action9000 · **Reply #5 on:** February 08, 2008, 02:19:16 AM

Quote

try a System Restore. If that doesn't work..then I dunno. It could be a trojan. o.O

At which point my advice would be to format your computer as soon as possible. try backing up files onto a drive or CD that, if the backed up files are infected, that problems won't arise.

Mumbling · **Reply #6 on:** February 08, 2008, 02:20:47 AM

Last time i had that virus too I used system restore... That worked..

Thanks for warning us all!

DarkHououmon · **Reply #7 on:** February 08, 2008, 02:20:57 AM

I'll be sure to suggest that to my infected friends of their problems persist.

And you're welcome, Mumbling.

Kor · **Reply #8 on:** February 08, 2008, 02:34:10 AM

hopefully no one will get it, and if it does there will be an easy fix for them.

landbeforetimelover · **Reply #9 on:** February 08, 2008, 05:51:17 AM

What is your version of MSN Messenger Darkhououmon? There was a very nasty virus associated with the older version of MSN, and so many people haven't upgraded to the newer version that cannot be affected by it.

Petrie. · **Reply #10 on:** February 08, 2008, 09:16:20 AM

I wonder if it spreads through 3rd party messenger programs. I don't use the official ones.

DarkHououmon · **Reply #11 on:** February 08, 2008, 12:01:38 PM

Quote from: landbeforetimelover,Feb 8 2008 on 05:51 AM

What is your version of MSN Messenger Darkhououmon? There was a very nasty virus associated with the older version of MSN, and so many people haven't upgraded to the newer version that cannot be affected by it.

8.1

DarkHououmon · **Reply #12 on:** February 08, 2008, 02:40:45 PM

I believe I found out how to fix the problem when I stumbled upon a Yahoo Answers page.

The name of the virus appears to be W32.Spybot.YXX.

Quote

1. Go to start>run and type msconfig. Under the Startup tab, un-check wkssvc.exe.

2. Go to start>run type cmd, once the window pops up type:

del "%windir%\system32\vxconfig.xml" "%windir%\wkssvc.exe" "%windir%\system32\spool.exe"

and hit "enter."

(hint: you can copy this, right click in the command prompt click "paste" and hit "enter")

3. Go to start>run, type regedit, click edit in the new window, then click find. In the search window type wkssvc.exe and delete anything that comes up.

4. You're done! Enjoy your computer free of this madness.

Kor · **Reply #13 on:** February 08, 2008, 02:51:45 PM

Thanks, this may help many people.

Nimrod · **Reply #14 on:** February 08, 2008, 04:12:19 PM

Before a month I received this message too. And I clicked at it

. Me dammit Idiot. But gladly I have a good antivirus system. It noticed the virus and deleted it.

But anyway, thanks for the warning.

Lain_EX · **Reply #15 on:** February 08, 2008, 06:15:59 PM

Thanks for the warning, DarkHououmon. I'll try to stay alert at all times, I'd recommend the rest of you to do the same.

landbeforetimelover · **Reply #16 on:** February 08, 2008, 07:05:28 PM

Quote

8.1

That's the problem. Their newest version 8.5.1 is not affected. The whole reason why they made 8.5.1 was to get a more vista look and cuz so many people were getting viruses. They actually made an announcement saying that it was advisable for me to upgrade to 8.5 because the security of 8.1 had been compromised and they were no longer going to work on the problem because a beta version of 8.5 was available. They now have the full version of 8.5, so everyone who uses MSN should go get it. And no Petrie, this is a security threat directly linked to MSN messenger 8.1 and below. Who knows if it might get into 8.5 though. If the son of a *beep* is still bored, he'll probably make one for 8.5 too. :angry:

Petrie. · **Reply #17 on:** February 08, 2008, 07:22:31 PM

I'll watch out for the link nonetheless.

DarkHououmon · **Reply #18 on:** February 08, 2008, 08:47:40 PM

Okay I've upgraded.