is this a virus? - Printable Version
-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Skype & Live Messenger (/forumdisplay.php?fid=10)
+----- Thread: is this a virus? (/showthread.php?tid=52155)
is this a virus? by Akio on 10-24-2005 at 10:05 AM
i got this message from someone and i wanna noe if it's a virus cuz it ask u to download a file
Heh, is this really you? www.messengertools.org/msn.php?session=kJV83&user=akio562@gmail.com
RE: is this a virus? by M73A on 10-24-2005 at 10:22 AM
it looks like a virus as it has your email (im guessing) at the end....
(just because of the fact that some previous viruses have done that..)
RE: is this a virus? by hexel on 10-24-2005 at 10:23 AM
Indeed it is.
Even if you click that link, it'll point you to the page where it asks you to download the file. (I would recommend against clicking the link, unless you're using Firefox. I have no idea how Internet Explorer would handle it, nor do I want to find out!)
It drops a file called "svshost" into a hidden directory in the system32 folder. It blocks (at least) task manager and regedit, and sends itself to all the users on your list.
What I suggest is to close down and delete a file called svshost.exe (not to be confused with svchost.exe)...
1) Go Start > Run > cmd
2) Type taskkill /f /im svshost.exe
3) Go to WINDOWS\system32
4) Click Tools > Folder Options > View
5) Click Show hidden files and folders and uncheck Hide protected operating system files
6) Find the random lettered folder
7) Delete
... and run a full virus/adware/spyware scan.