Forum Home
Press F1
 
Thread ID: 89464 2008-05-01 05:47:00 MSN Messenger virus removal? Renmoo (66) Press F1
Post ID Timestamp Content User
664607 2008-05-01 05:47:00 Dear all, the MSN messenger of a friend of mine has been infected with a virus (quite likely?). Her chat client automatically sends the following message to those who are online and offline:


Heyy install it

www.likefiremusic.info
I have tried googling for the message sent, but to no avail. And yes, I am positive she did not intentionally send me the message.

Cheers :)
Renmoo (66)
664608 2008-05-01 05:58:00 Please download HijackThis to your desktop..

www.trendsecure.com
Alternate link
download.bleepingcomputer.com

This program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file here. Do not fix anything in HijackThis since they may be harmless.


==========================

Ok.We need to download ComboFix.exe. This will give a better view to the files running and also hidden on your computer.

Please visit this webpage for download links, and instructions for running ComboFix (www.bleepingcomputer.com)


When the tool is finished, it will produce a report for you. Please copy and paste the "C:\ComboFix.txt" along with a new 'HijackThis' log so that we can continue to do any further cleaning that your system may require.

Caution: Never run and remove files with Combofix unless supervised by a qualified security analyst who is experienced in the use of Combofix. Mal use can cause serious computer problems

NOTE: Combofix prevents autorun of all CDs, floppies and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you - please let me know.
Pancake (6359)
664609 2008-05-01 12:07:00 NOD32 gets rid of it I think.

Un-install MSN Messenger, run NOD32 and anything else you want (trojan remover and spy doctor) and get a NEW copy of the latest version and run it.

I solved a similar problem for my friends using this method.
beeswax34 (63)
1