NEW Windows Live Messenger Virus!!

[LaineY]

Please move this if its in the wrong thread or section..

Please note..

last night i signed onto WLM and my GF sent me a picture saying summer pics 07 now... i accepted it and opened it.. saw it was an EXE and told her she sent me a virus.... after no reply for 3 mins i jst opened it..

the min i opened it my msn started opening every single contact on my list and sending the same zip.. now this is happening every 45 mins

after countless scans with Symantic Norton Antivirus Corporate Edition / Adaware and Spybot...

it wont find the bloody thing...

Just a warning to anyone DO NOT ACCEPT it..

im totally rageing cause i have no idea how to get rid of it..

do bear in mind.. as far as iv been told by other contacts, "they didnt even accept it and ended up with it"

anyone any ideas on removal...

"IF You have no ideas about it PLEASE DONT POST.. alot of threads are already full of spam lol"

GOD!!

[Graham M]

When she didn't reply... why did you click the Exe?

[Paul K]

Forward it to an AV company

[LaineY]

she didnt reply cause the msn crashes when the files exec'd and the EXE was in a ZIP and didnt look like an EXE

[Cerberus]

Had the same and deleted it straight away. Also uses .scr files as well as .exe

Some of you may want to turn off file transfers that maybe harmful in the options menu Tools > Options > File Transfer.

I have also heard that some files are being passed as .zip/.rar files to bypass the above. Just use your loaf.

Oh and lainey it was you who sent me it you git. What it must be doing is sending the files to your contacts list and spreading that way. Jump on MSN when you can lainey or gimme a call. Will happily show you the chat logs too. Oh and lainey, virus scan your PC and search for your .exe file in My Received folder.

-Edit-

Chat log pasted:

Messenger Plus! Chat Log

Session Start: 09 August 2007

• Cerby (xxx@xxxxxxx.co.uk)
• NEW MSN VIRUS TONITE GUYS ... BE AWARE! DO NOT ACCEPT ANY FILES FROM ANYONE (xxx@xxxxxxxxx.com)

(01:45) NEW MSN VIRUS TO: Initiated a file transfer (02:29) You have successfully received C:\Documents and Settings\HP_Owner\My Documents\My Received Files\images078.zip from NEW MSN VIRUS TONITE GUYS ... BE AWARE! DO NOT ACCEPT ANY FILES FROM ANYONE.
Session Start: 09 August 2007

• Cerby (xxx@xxxxxxx.co.uk)
• NEW MSN VIRUS TONITE GUYS ... BE AWARE! DO NOT ACCEPT ANY FILES FROM ANYONE (xxx@xxxxxxxxx.com)

(03:43) NEW MSN VIRUS TO: Initiated a file transfer (03:43) You have failed to receive file "photo45.zip" from NEW MSN VIRUS TONITE GUYS ... BE AWARE! DO NOT ACCEPT ANY FILES FROM ANYONE. (03:44) NEW MSN VIRUS TONITE GUYS ... BE AWARE! DO NOT ACCEPT ANY FILES FROM ANYONE is now Online

@Paul - I have just scanned the .rar/.zip file and the .scr file with my Norton which is up to date and it says there isnt any virus present. How do I now go about submitting this to Symantec? Thanks!

[vmtech]

lainey why did you check it, theres always a virus floating about msn, theres a very simple way of finding out if its real or not ask the person who sent it if the actually did

[Cerberus]

Originally Posted by vmtech

lainey...

Seconded!

[Jules]

Laney am I correct in thinking you work tech support?

I am baffled as to why after saying you had been sent a virus you then went ahead and opened it?

[piggy]

just found this for anybody interested its instructions on how to remove the worm manually

http://www.cisrt.org/enblog/read.php?128

[vmtech]

yeah wondering that myself

[7@m3 G33k]

Originally Posted by Jules

Laney am I correct in thinking you work tech support?

I am baffled as to why after saying you had been sent a virus you then went ahead and opened it?

Let's see...we pay 25p/min if we talk to this guy on the phone...can we claim something back from VM when we dig him out of the poo on here?

[vmtech]

emm lainey is gd at what he does but every1 makes mistakes

[Cerberus]

Originally Posted by 7@m3 G33k

Let's see...we pay 25p/min if we talk to this guy on the phone...can we claim something back from VM when we dig him out of the poo on here?

I know Lainey personally and he does a dam good job. I am sure that this virus was passed onto him innocently and he has done well to alert other users on here.

Keep it constructive, critcising a VM individual employee for their 25p/min tech support is not his fault.

[AndrewJ]

Owned

[7@m3 G33k]

Originally Posted by Cerberus

I know Lainey personally and he does a dam good job. I am sure that this virus was passed onto him innocently and he has done well to alert other users on here.

Keep it constructive, critcising a VM individual employee for their 25p/min tech support is not his fault.

Lighten up - my comment was obviously not a serious jibe, just a bit of fun more at the expense of VM than Lainey. Tech support in general would have a better rep if we were all able to have a laugh at our own mistakes.

Oh and flash your negative reps at me all you like - this is how I am