msn messenger worm threat

kronas · 05-01-2004, 21:22

a new worm is spreading via instant messaging service msn messenger

Jitux.A is a worm which is spread by clicking on a url sent via a message, by clicking on the link, a file is downloaded called jituxramon.exe and stays in the pc's memory it will automactically send the message every 5 mins to everyone on your contacts list

http://www.pcworld.com/news/article/...87,pg,1,00.asp

Terminal · 05-01-2004, 22:19

Quote:

Originally Posted by kronas

a new worm is spreading via instant messaging service msn messenger
Jitux.A is a worm which is spread by clicking on a url sent via a message, by clicking on the link, a file is downloaded called jituxramon.exe and stays in the pc's memory it will automactically send the message every 5 mins to everyone on your contacts list
http://www.pcworld.com/news/article/...87,pg,1,00.asp

Nice one!
Discovered last week and known also as Win32/HLLW.Retgeek.

Kudos for the heads up, kronas

Marge · 05-01-2004, 22:23

Info about this also on the ntlworld website and links too

luftys · 05-01-2004, 23:01

Quote:

Originally Posted by kronas

a new worm is spreading via instant messaging service msn messenger

Jitux.A is a worm which is spread by clicking on a url sent via a message, by clicking on the link, a file is downloaded called jituxramon.exe and stays in the pc's memory it will automactically send the message every 5 mins to everyone on your contacts list

http://www.pcworld.com/news/article/...87,pg,1,00.asp

Thanks Kronas

have told the kids not to open anything they dont know

kronas · 06-01-2004, 00:39

no problem i just like to keep people on there guard, as the viruses and worms come through

Shaun · 06-01-2004, 01:53

I'm not following you around K honest!

Do you know what the command is to remove version 4.7 of Messenger from XP?? I cant find a link anywhere!

kronas · 06-01-2004, 01:57

Quote:

Originally Posted by dellwear

I'm not following you around K honest!

Do you know what the command is to remove version 4.7 of Messenger from XP?? I cant find a link anywhere!

all i did was go to the 'run' box type 'msconfig' disabled 'msnmsgr' or something like that from the 'startup' tab, and i got it to completely remove, make sure you use the uninstaller first in add/remove if its there (its been a while since i have done it)

then just delete the folder in program files.

anymore problems post back

Shaun · 06-01-2004, 02:08

Cheers K, couldn't find the option in msconfig so went googleing and found the command I was looking for:

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove

all that nastiness gone for good.

M35A2C · 07-01-2004, 18:36

Is this what the email from ntl is about ?

Is it safe to download & install the patch quoted on the microsoft website ? Or did I receive one of these hoax emails ?

albone · 09-01-2004, 17:11

yep I was just looking as I too have received that email too! It appears that anyone useing xp or 2000 are at risk. ms ref: 'MS03-043 Buffer overrun in messenger service could allow code execution (828035)' this from tec-help on ms web site. Links given by email from ntl.