Shoutbox

I, too, have experienced this at the end of a Plus! install. Using Avast! antivirus, got the following -- see attachment:

Full file name:  C:\DOCUME~1\Rosalie\LOCALS~1\Temp\msgpl_e138.tmp\spinstall.exe

This PC had an old version of Messenger, which was updated to Messenger Live! after a prompt stating that the updated had to occur to continue. Once Messenger Live! was installed, the Plus! | Compatibility Info link was clicked, which auto-downloaded the version in question. At the end of the Plus! update, the warning popped up.

DIR in the TEMP directory reveals the following:
10/21/2007  05:05 AM            40,960 rtdrvmon.exe
10/21/2007  05:05 AM            49,152 ~DFD88C.tmp
10/21/2007  05:05 AM    <DIR>          msgpl_e138.tmp
10/21/2007  05:01 AM         3,954,000 MsgPlus - Auto Update.exe
10/21/2007  04:54 AM        18,895,728 msg4F.exe

After choosing No Action from Avast!, I received another warning, this time for C:\Program Files\Adverts\uninst.exe, for the same virus.

I promptly deleted the C:\Program Files\Adverts directory, which contained only the UNINST.EXE file.

Note that I chose NOT to install the sponsor.

It would appear that, indeed, there IS a trojan within the Plus! install package -- possibly in the sponsor.

I am currently scanning with Symantec online scanner, will update when results are available.

Cheers
Darren