New MSN Virus/Bug: "Chatpr" - Printable Version
-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: New MSN Virus/Bug: "Chatpr" (/showthread.php?tid=45768)
New MSN Virus/Bug: "Chatpr" by got_banned on 06-04-2005 at 08:57 AM
Just another thread I've made regarding an MSN Virus. A friend of mine has a virus on her MSN Messenger that sends links to all the contacts on her list, not too sure what the link had completely but it had "Chatpr" at the end. I've sent her a few programs to run but it hasn't worked.
Anyone else had this? what's the best program and way to remove this? In advance thanks so much to anyone who helps, much appreciated! 
RE: New MSN Virus/Bug: "Chatpr" by Stigmata on 06-04-2005 at 09:35 AM
sorry but via a symantec virus search, i was unable to locate any virus called chatpr...
but if its one that sends links over msn it is properfly a variation of W32.Kelvir
here is a link to the removal tool:
http://securityresponse.symantec.com/avcenter/ven....removal.tool.html
RE: New MSN Virus/Bug: "Chatpr" by Zephyr on 06-04-2005 at 09:41 AM
The virus is hosted at http://chatpr.org/ The page is msn.php? which is followed by email=<contact's e-mail>
The file downloaded is named by the e-mail address and it is an MS-DOS Application.
I can't find any any reference to what the virus is or how to remove it.
RE: New MSN Virus/Bug: "Chatpr" by ddunk on 06-04-2005 at 09:45 AM
quote:
Originally posted by monster.rat
I can't find any any reference to what the virus is
Most probably another version of Rxbot which connects you to an IRC server, then, along with all the people of that have the virus, can be used to ddos sites.
EDIT: Checked it out, figured out what server it connects to, relayed that to Segosa since he knows more about it than me. The program also makes a connection to 180solutions.com which is the infamous adware/spyware site.
RE: New MSN Virus/Bug: "Chatpr" by Zephyr on 06-04-2005 at 10:00 AM
The file is only renamed to the person's e-mail address if they are @hotmail.com. If the email is not @hotmail.com, the virus will be called 'unknown@hotmail.com'
I think that the text sent along with the link is ur profile is under chatpr?
I would recommend pressing Ctrl+Alt+Del and seeing if there is a process with your e-mail in the name, or unknown@hotmail.com. If it is there, end the process and also delete it from your startup.
Start-> Run -> type msconfig
then on the startup tab, look for the file which is @hotmail.com and uncheck it. Then restart your computer.
RE: New MSN Virus/Bug: "Chatpr" by zach on 06-04-2005 at 01:02 PM
Is this the virus? http://securityresponse.symantec.com/avcenter/ven...w32.serflog.c.html
If it is, I got that one quite a while ago. I think that it the transfer was accepted by the Plus! auto-accept 
You should be able to use the removal tool on the link above if it is the same virus.
RE: New MSN Virus/Bug: "Chatpr" by Anubis on 06-04-2005 at 01:07 PM
quote:There are loads of viruses that spread through MSN Messenger, however I don't think the one you mentioned there has anything to do with the one mentioned in the first post.
Originally posted by zach
If it is, I got that one quite a while ago. I think that it the transfer was accepted by the Plus! auto-accept
Before it starts, please do not start posting every virus that spreads through MSN Messenger, because it isn't likely to be the one mentioned.
RE: New MSN Virus/Bug: "Chatpr" by segosa on 06-05-2005 at 10:58 AM
It downloads shitloads of adware: 180solutions, nCase, etc. I didn't bother checking if it connected to an IRC server, but I'd assume it does.