What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Skype & Technology » Skype & Live Messenger » messenger virus? HELP please

messenger virus? HELP please
Author: Message:
tmlfan4eva
New Member
*


Posts: 4
Joined: Oct 2005
O.P. messenger virus? HELP please
Someone online today IMd me and said "Hey is this really you? http://messengertools.org/contactinfo.exe" or something like that, I downloaded it and opened it opened up a chat window with every person online and said that that person had just said to me.  I can't go on msn now because it'll just do it again, also when I'm on the internet, it will open up the find option (control+F) and paste "www.messengertools.org/msn.php?session=gGvc1040&user=$msnaddy" into it.  I've ran anti-virus,spyware,ad-aware scans and nothing came up.  Someone please help me!

This post was edited on 10-22-2005 at 11:24 PM by tmlfan4eva.
10-22-2005 10:32 PM
Profile E-Mail PM Web Find Quote Report
matty
Scripting Guru
*****


Posts: 8336
Reputation: 109
39 / Male / Flag
Joined: Dec 2002
Status: Away
RE: messenger virus? HELP please
DON'T BOTHER DOWNLOADING THE FILES, I ALREADY HAVE

What you want to do is press CTRL+ALT+DEL

Click on the Processes Tab (Windows 2000/XP+ Only)
Post a screenshot (or type the items in the list). This way we can tell you which one to end and what to do after that. For the time being don't sign into MSN Messenger just yet. Wait until this is all cleared up ok?

Also you posted in the wrong forum. This should be in MSN/Windows Messenger not MsgPlus! Help and Support. This has nothing to do with Messenger Plus!.

Matty

This post was edited on 10-23-2005 at 01:07 AM by matty.
10-23-2005 01:01 AM
Profile E-Mail PM Find Quote Report
tmlfan4eva
New Member
*


Posts: 4
Joined: Oct 2005
O.P. RE: messenger virus? HELP please
Sorry for posting in the wrong forum, I'm sure a mod or someone will move it sooner or later.  I can't go into the processes menu normally (control+alt+delete) but I still can show you a screenshot of the processes.  Keep in mind I already deleted svshost.exe (temporarily disabled the virus)
[Image: msnvirus4gg.th.jpg]
10-23-2005 01:07 AM
Profile E-Mail PM Web Find Quote Report
matty
Scripting Guru
*****


Posts: 8336
Reputation: 109
39 / Male / Flag
Joined: Dec 2002
Status: Away
RE: messenger virus? HELP please
Download this program Autoruns from SysInternals

Look for svshost.exe and right click on it and select Delete.
10-23-2005 01:11 AM
Profile E-Mail PM Find Quote Report
tmlfan4eva
New Member
*


Posts: 4
Joined: Oct 2005
O.P. RE: messenger virus? HELP please
I <3 you ;)
10-23-2005 01:19 AM
Profile E-Mail PM Web Find Quote Report
matty
Scripting Guru
*****


Posts: 8336
Reputation: 109
39 / Male / Flag
Joined: Dec 2002
Status: Away
RE: messenger virus? HELP please
quote:
Originally posted by tmlfan4eva
I <3 you ;)
Now as well you want to delete this folder "C:\Windows\system32\cfwkattrgt"

When you originally ran the contactinfo.exe file it created that folder and copied itself as "svshost.exe" to be run.

You may not see the folder so to show it click on Tools > Folder Options > View > Show hidden files and folders.
10-23-2005 01:44 AM
Profile E-Mail PM Find Quote Report
SikStyles
Senior Member
****

Avatar
DeathCult

Posts: 894
Reputation: 29
35 / Male / Flag
Joined: Jan 2005
RE: messenger virus? HELP please
and for the note tmlfan4eva if someone says look at this picture or refers to a picture and the URL has an .exe at the end of it then dont open it because picture files dont end with .exe's they usually end in .jpeg .gif .png .bmp

.exe are executables which you  have to run (viruses/trojans/bad stuff can be in there)
You're still breathing? Why?
Get off the cross, the wood is needed.
[Image: userbar.jpg]

10-23-2005 02:39 AM
Profile E-Mail PM Find Quote Report
tmlfan4eva
New Member
*


Posts: 4
Joined: Oct 2005
O.P. RE: messenger virus? HELP please
Yeah I know, it was stupid but oh well...I've learned from my mistake.  About deleting C:\Windows\system32\cfwkattrgt there was no file like that after I showed the hidden files.  So I guess its totaly gone?  Thanks for the help Matty, much appreciated.
10-23-2005 11:21 PM
Profile E-Mail PM Web Find Quote Report
« Next Oldest Return to Top Next Newest »


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On