What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Skype & Technology » Tech Talk » MSN Messenger Worm Removal

Pages: (2): « First [ 1 ] 2 » Last »
MSN Messenger Worm Removal
Author: Message:
vn2k5
New Member
*


Posts: 11
Joined: Mar 2005
O.P. MSN Messenger Worm Removal
Hi,

From what I have heard this is a rapidly spreading threat, which automatically sends itself to everybody on your contact list. I got sent a file called 'Best_Friend.scr' by one of my contacts and it turned out to be a .exe file and a virus. I have read up on the entire virus and removal instructions on http://securityresponse.symantec.com/avcenter/ven...w32.yaha.k@mm.html.

I am not sure this is the actual virus I have, but it is either this or something VERY similar.

I got to removal instruction number 3 (copying Regedit.exe to Regedit.com), but when I go Start > Run > command, the MS DOS application will not let me type in it on my laptop, but it does on this PC? (This is in Safe Mode).

Any ideas? Any help would be greatly appreciated!!

This post was edited on 03-18-2005 at 05:23 PM by vn2k5.
03-18-2005 05:20 PM
Profile E-Mail PM Find Quote Report
user27089
Disabled Account


Posts: 6321
Joined: Nov 2003
Status: Away
RE: MSN Messenger Worm Removal
Its called the Bropia Worm, it its going through msn messenger at the moment, there have been many threads throughout the forum about it and its removal.

Here are them:

Webcam_015.pif -- Virus??
Trojan attack - mind helping?
New Virus
BROPIA
Virus on MSN
Messenger and Viruses
Virus?
I have a virus, but which?
help!! Got a virus, don't know wich!!
Virus Alert

This post was edited on 03-18-2005 at 05:36 PM by user27089.
03-18-2005 05:34 PM
Profile PM Find Quote Report
vn2k5
New Member
*


Posts: 11
Joined: Mar 2005
O.P. RE: MSN Messenger Worm Removal
No, it was none of the file names for that worm. I received 'Best_Friend.scr'
03-18-2005 05:37 PM
Profile E-Mail PM Find Quote Report
user27089
Disabled Account


Posts: 6321
Joined: Nov 2003
Status: Away
RE: MSN Messenger Worm Removal
yes, it comes in the form of *.scr, *.pif + *.exe, not only one filetype, its an advanced worm really :s... not that advanced, but its spread quickly etc.
03-18-2005 05:38 PM
Profile PM Find Quote Report
vn2k5
New Member
*


Posts: 11
Joined: Mar 2005
O.P. RE: MSN Messenger Worm Removal
Oh, all I need to know is how to type in DOS :@

I type 'command' but it won't let me type in the window that appears
03-18-2005 05:40 PM
Profile E-Mail PM Find Quote Report
user27089
Disabled Account


Posts: 6321
Joined: Nov 2003
Status: Away
RE: MSN Messenger Worm Removal
press windows button + r, then type in 'cmd'... not command.
03-18-2005 05:41 PM
Profile PM Find Quote Report
vn2k5
New Member
*


Posts: 11
Joined: Mar 2005
O.P. RE: MSN Messenger Worm Removal
tried that too
03-18-2005 05:41 PM
Profile E-Mail PM Find Quote Report
user27089
Disabled Account


Posts: 6321
Joined: Nov 2003
Status: Away
RE: MSN Messenger Worm Removal
Command + Cmd are different things... AFAIK...

But yeah, what does it say when you open up the command prompt?
03-18-2005 05:43 PM
Profile PM Find Quote Report
vn2k5
New Member
*


Posts: 11
Joined: Mar 2005
O.P. RE: MSN Messenger Worm Removal
It just says the normal stuff:

Microsoft<R> Windows DOS
<C>Copyright Microsoft Corp 1990-2001.

C:\DOCUME~1\USERNAME>


(this is command.com, not command.exe). Part of the virus means when a .exe file is executed, it automatically closes it as this is what it has instructed the registry to do. So when I try running 'cmd' that closes too because it's .exe, but when I try running 'cmd.com' it says cannot be found.

CAN SOMEONE PLEASE HELP ME YOU DON'T KNOW HOW MUCH THIS IS ANNOYING ME!!!!!!!!!!!!!!

This post was edited on 03-18-2005 at 06:17 PM by WDZ.
03-18-2005 05:54 PM
Profile E-Mail PM Find Quote Report
user27089
Disabled Account


Posts: 6321
Joined: Nov 2003
Status: Away
RE: MSN Messenger Worm Removal
Have you tried running in safe mode and seeing if anything can be fixed via. that?

Like, go to safe mode and run an antivirus or something.
03-18-2005 06:18 PM
Profile PM Find Quote Report
Pages: (2): « First [ 1 ] 2 » Last »
« Next Oldest Return to Top Next Newest »


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On