msn messenger worm threat
 

a new worm is spreading via instant messaging service msn messenger

Jitux.A is a worm which is spread by clicking on a url sent via a message, by clicking on the link, a file is downloaded called jituxramon.exe and stays in the pc's memory it will automactically send the message every 5 mins to everyone on your contacts list


http://www.pcworld.com/news/article/...87,pg,1,00.asp

Re: msn messenger worm threat
 

Nice one!
Discovered last week and known also as Win32/HLLW.Retgeek.

Kudos for the heads up, kronas
:tu:

Re: msn messenger worm threat
 

Info about this also on the ntlworld website and links too

Re: msn messenger worm threat
 

Thanks Kronas :wavey: have told the kids not to open anything they dont know

Re: msn messenger worm threat
 

no problem i just like to keep people on there guard, as the viruses and worms come through :)

Re: msn messenger worm threat
 

I'm not following you around K honest! ;) Do you know what the command is to remove version 4.7 of Messenger from XP?? I cant find a link anywhere! :(

Re: msn messenger worm threat
 

all i did was go to the 'run' box type 'msconfig' disabled 'msnmsgr' or something like that from the 'startup' tab, and i got it to completely remove, make sure you use the uninstaller first in add/remove if its there (its been a while since i have done it)

then just delete the folder in program files.

anymore problems post back :)

Re: msn messenger worm threat
 

Cheers K, couldn't find the option in msconfig so went googleing and found the command I was looking for:

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove


all that nastiness gone for good.

Re: msn messenger worm threat
 

Is this what the email from ntl is about ? :confused:

Is it safe to download & install the patch quoted on the microsoft website ? Or did I receive one of these hoax emails ? :eek:

Re: msn messenger worm threat
 

yep I was just looking as I too have received that email too! It appears that anyone useing xp or 2000 are at risk. ms ref: 'MS03-043 Buffer overrun in messenger service could allow code execution (828035)' this from tec-help on ms web site. Links given by email from ntl.