What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Skype & Technology » Skype & Live Messenger » Yet another MSN Messenger based Virus

Pages: (4): « First « 1 [ 2 ] 3 4 » Last »
Yet another MSN Messenger based Virus
Author: Message:
Pyro
Full Member
***

Avatar
The Frog Is Back!

Posts: 152
Reputation: -6
32 / Male / –
Joined: Jun 2005
RE: Yet another MSN Messenger based Virus
someone should find out what is making it say go to {msnvirus.com} of wateva and make a patch for it :p
[Image: angusl.png]
/!\5789 days, 14 hours, 34 seconds ago Until Xmas!!/!\
08-22-2005 10:04 AM
Profile PM Web Find Quote Report
Fergy
Full Member
***

Avatar

Posts: 164
Reputation: 7
36 / Male / Flag
Joined: Nov 2004
O.P. RE: Yet another MSN Messenger based Virus
i see what you are saying

a bit off-topic here, but...
somebody could make a plugin which checks for a .txt or any other information file which could contain excerpts of url's, filenames and/or prose used to transmit the virus.

you would have to get user support for a plugin like that however.
I should change my sig ay?
08-22-2005 03:04 PM
Profile E-Mail PM Find Quote Report
ShawnZ
Veteran Member
*****

Avatar

Posts: 3146
Reputation: 43
32 / Male / Flag
Joined: Jan 2003
RE: Yet another MSN Messenger based Virus
quote:
Originally posted by Fergy
i see what you are saying

a bit off-topic here, but...
somebody could make a plugin which checks for a .txt or any other information file which could contain excerpts of url's, filenames and/or prose used to transmit the virus.

you would have to get user support for a plugin like that however.

it wouldnt be stored in a txt :/

quote:
Originally posted by YA_MUM
someone should find out what is making it say go to {msnvirus.com} of wateva and make a patch for it :p

patch a virus? why not just delete it? :\
Spoiler:
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
08-22-2005 03:07 PM
Profile PM Web Find Quote Report
Fergy
Full Member
***

Avatar

Posts: 164
Reputation: 7
36 / Male / Flag
Joined: Nov 2004
O.P. RE: RE: Yet another MSN Messenger based Virus
quote:
Originally posted by ShawnZ
it wouldnt be stored in a txt :/

yeah i know, i was just using it as an example, some sort of file that could contain a blacklist
I should change my sig ay?
08-22-2005 03:10 PM
Profile E-Mail PM Find Quote Report
ShawnZ
Veteran Member
*****

Avatar

Posts: 3146
Reputation: 43
32 / Male / Flag
Joined: Jan 2003
RE: Yet another MSN Messenger based Virus
quote:
Originally posted by Fergy
quote:
Originally posted by ShawnZ
it wouldnt be stored in a txt :/

yeah i know, i was just using it as an example, some sort of file that could contain a blacklist

Um no, the links are sent live to all the people using it in a botnet over IRC.

www.m00.cx/wiki/index.php/botnets
Spoiler:
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
08-22-2005 03:11 PM
Profile PM Web Find Quote Report
Sunshine
Elite Member
*****

Avatar

Posts: 5141
Reputation: 122
– / Female / Flag
Joined: Mar 2004
Status: Away
RE: Yet another MSN Messenger based Virus
There is nothing you can do about it besides using common sense (and keep your AV definitions up to date, but that will not protect against new virusses). Seriously, do you want the same thing as with the .pif, MSNM blocking it? Blocking all urls? Because that would be the only thing to prevent these messages.

Most important rule to prevent getting infected:
If the first thing sent in a message is a link, do not click it! Virusses/worms always send messages to all contacts on sign in.

Second thing that will stop it beeing spred is:
Warn the person you got that message from and if you can provide instructions on how to get rid of it. That person can then get rid of it and send your intructions to the contact he/she got it from.

This post was edited on 08-22-2005 at 03:26 PM by Sunshine.
[Image: 25dr3o9]
08-22-2005 03:22 PM
Profile E-Mail PM Web Find Quote Report
Fergy
Full Member
***

Avatar

Posts: 164
Reputation: 7
36 / Male / Flag
Joined: Nov 2004
O.P. RE: Yet another MSN Messenger based Virus
i'm talking about MSN not IRC

say somebody sent you something like this:
quote:
OMGZ! you have 2 check dis out: http://www.reallybadsite.com/with/a/reallybadfile.pif
The plugin would check it's blacklist for a match, it finds a match in *.reallybadfile.pif (where * is a wildcard) and alerts you that your contact has been infected with a known virus (this could also inform your contact as well).
I should change my sig ay?
08-22-2005 03:30 PM
Profile E-Mail PM Find Quote Report
ShawnZ
Veteran Member
*****

Avatar

Posts: 3146
Reputation: 43
32 / Male / Flag
Joined: Jan 2003
RE: Yet another MSN Messenger based Virus
quote:
Originally posted by Fergy
i'm talking about MSN not IRC

say somebody sent you something like this:

The plugin would check it's blacklist for a match, it finds a match in *.reallybadfile.pif (where * is a wildcard) and alerts you that your contact has been infected with a known virus (this could also inform your contact as well).


I meant irc as in thats where the virus gets the new link from.
Spoiler:
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
the game.
08-22-2005 03:41 PM
Profile PM Web Find Quote Report
Fergy
Full Member
***

Avatar

Posts: 164
Reputation: 7
36 / Male / Flag
Joined: Nov 2004
O.P. RE: Yet another MSN Messenger based Virus
ahh yeah, got it!
I should change my sig ay?
08-22-2005 03:51 PM
Profile E-Mail PM Find Quote Report
Dane
Non-Elite Member
*****

Avatar
Dont ask to ask, just ASK!

Posts: 1621
Reputation: 52
35 / Male / Flag
Joined: Dec 2002
Status: Away
RE: Yet another MSN Messenger based Virus
REMINDER: Microsoft provides FREE virus removal over the telephone.  1-866-PCSAFETY or 1-866-727-2338
This phone number is for virus and other security-related support. It is available 24 hours a day for the U.S. and Canada.

On another note, The related virus I was talking about, McAfee has provided an EXTRA.dat for detection of a virus that is related to this one.  A fix for this virus has not yet been issued by McAfee, this is simply a fix for the related virus.

Simply copy the EXTRA.dat to your McAfee Program Directory

I have attached the zip file containing EXTRA.DAT.

-----------------------------------------

The file Fergy originally spoke of is Backdoor.Tixanbot.  The virus also has been known to spread as saying something along the lines of "Download the msn plus update! {url here}"

Update: Symantec Security Response has just issued Beta Virus Definitions (RapidRelease) that include protection for the original threat in this thread. Download them here

.zip File Attachment: EXTRA-NewKelvir1.zip (947 bytes)
This file has been downloaded 688 time(s).

This post was edited on 08-23-2005 at 04:30 AM by Dane.
08-23-2005 02:20 AM
Profile PM Web Find Quote Report
Pages: (4): « First « 1 [ 2 ] 3 4 » Last »
« Next Oldest Return to Top Next Newest »


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On