Author Topic: Messenger viruses abound!  (Read 3045 times)

0 Members and 1 Guest are viewing this topic.

Offline TanisNikana

  • Bunnygirl
  • *****
  • Posts: 865
Messenger viruses abound!
« on: October 27, 2008, 09:59:57 pm »
Caution! If someone you know sends you a suspicious looking file over your IM network, be advised it could be a virus!

Quote
(21:32:23) Megan: here, this picure is GREAT for your desktop wallpaper.
(21:32:25) Megan is offering to send file photo_977-JPEG.zip

This spells trouble! If you're using a 1st party client like MSN Live, Yahoo! Instant Messenger, or AIM 6.0, you should switch to a more secure client. Better clients include Pidgin (http://pidgin.im), trillian (http://www.ceruleanstudios.com), or meebo (http://meebo.com).

Remember, only you can prevent the distribution of viruses!

(This public service announcement brought to you by the fact that three members of this board sent me viruses in this manner in the last 10 minutes.)
« Last Edit: October 27, 2008, 10:14:10 pm by TanisNikana »

Offline StarryShay

  • Bunnygirl
  • *****
  • Posts: 4750
Re: Messenger viruses abound!
« Reply #1 on: October 27, 2008, 10:08:39 pm »
Thank you for the warning.

Offline Sugarlat

  • Bunnygirl
  • *****
  • Posts: 3552
    • Youtube - Sugarlatdesu
Re: Messenger viruses abound!
« Reply #2 on: October 27, 2008, 10:21:57 pm »
If you have been hit with this virus here's a way I found what to do if you do accept the file.

Quote
There is a virus being spread by MSN Messenger. You are asked to accept a picture from the person who you are talking to. If you do then a file called PICT1324(2)(1)(1)(2)(1)(1)(1).exe will be transferred to your computer and begin the process of asking others that you chat to to accept pictures as well.

The best way to avoid the file is to keep clicking Decline when asked (if the other person is affected then you will see several messages asking to accept the file)

If you do accept the file then you need to go into msconfig and remove the file from starting when Windows does. Do as follows:


1. Click on the Start button and click on Run
2. Then type in msconfig and click OK
3. You should see a screen that has System Configuration Utility in the blue bar
at the top
4. Click on the Tab that says Startup
5. Locate an entry that says MSN Messenger as the name. The filename will have
PIC1342(2)(1)(1)(2)(1)(1)(1).exe at the right hand side
6. Click the box beside the name MSN Messenger
7. Click the Apply button in the bottom right hand side of the screen
8. Then when prompted restart your computer and when Windows loads up again
locate the file on your computer (it should be in the C:/My Documents/Messenger Received Files directory) and then you should be able to delete it

I hope this helps anyone who has been affected

Offline Sugarlat

  • Bunnygirl
  • *****
  • Posts: 3552
    • Youtube - Sugarlatdesu
Re: Messenger viruses abound!
« Reply #3 on: October 27, 2008, 10:22:35 pm »
Oh this also transfers as zip files and pictures

Offline TanisNikana

  • Bunnygirl
  • *****
  • Posts: 865
Re: Messenger viruses abound!
« Reply #4 on: October 27, 2008, 10:24:25 pm »
It doesn't transfer as pictures. It transfers as executables wrapped as a zip file.

A better version of MSConfig is called Autoruns, and can be found

http://download.sysinternals.com/Files/Autoruns.zip

If you run it, in the menu there's an option to hide Microsoft entries. That should make finding malfunctioning software easier. Otherwise, it's as simple as clicking check boxes.

Edit: Forgot to mention, just run autoruns, and ignore autorunsc.
« Last Edit: October 27, 2008, 10:26:30 pm by TanisNikana »

Offline nikkiolie

  • It's over nine THOUSAND!!!!!
  • ******
  • Posts: 15368
    • Facebook
Re: Messenger viruses abound!
« Reply #5 on: October 27, 2008, 10:28:33 pm »
Thanks for the help. I'll be sure not to accept any files for now ^_^

Offline TanisNikana

  • Bunnygirl
  • *****
  • Posts: 865
Re: Messenger viruses abound!
« Reply #6 on: October 27, 2008, 10:30:03 pm »
I use autoruns in my line of work as a heavy-duty virus removal tool.

Offline JeffT

  • Administrator
  • *******
  • Posts: 1843
    • Facebook
    • Google+
    • Skype
    • Twitter
Re: Messenger viruses abound!
« Reply #7 on: October 27, 2008, 10:40:11 pm »
Secunia is a great site to keep track of vulnerabilities in software applications. They have an RSS feed to make it easier. I think they have a free software scanning tool which compares your applications against their database, though I haven't used it.

Be sure to check for new versions of all the software you use weekly! That includes browser plugins, and everything.
2023: Website Development Coordinator
2020-2022: Assistant Secretary, Website Development Coordinator
2011 - 2013, 2016-2019: Secretary
2007 - 2019: Website Manager
2015: Assistant Secretary
2014: Chair
2007 - 2009: Director of Publicity
2006: Copy Editor

Offline BlackjackGabbiani

  • Bunnygirl
  • *****
  • Posts: 1882
Re: Messenger viruses abound!
« Reply #8 on: October 28, 2008, 01:28:56 am »
My Trillian has a block against that--it never sends files anyway! Lousy piece of crap...

Offline saya-chan14

  • Bunnygirl
  • *****
  • Posts: 1189
Re: Messenger viruses abound!
« Reply #9 on: October 28, 2008, 10:31:18 pm »
Wait did they know they were doing it, or there computer did it by its self?
Sakura 11 cosplays
CC
Yosuke
Libra

Offline Hazuza

  • Bunnygirl
  • *****
  • Posts: 1119
    • DeviantArt
Re: Messenger viruses abound!
« Reply #10 on: October 28, 2008, 10:44:02 pm »
The computer does it itself, and once you get it, you start doing it too. You don't see your computer sending it if you have it though.

Offline Syd-chan

  • Bunnygirl
  • *****
  • Posts: 1338
Re: Messenger viruses abound!
« Reply #11 on: October 28, 2008, 11:29:28 pm »
I've been getting similar things like this from my contacts for a while[MSN]. It's usually a link that tells you to enter your phone number or hotmail password and e mail. >> I did NOT do that. But just today, I've been getting those exact same messages.

Offline Sugarlat

  • Bunnygirl
  • *****
  • Posts: 3552
    • Youtube - Sugarlatdesu
Re: Messenger viruses abound!
« Reply #12 on: November 07, 2008, 07:47:55 am »
It's been a while since I got sent a message for it. It might have passed on to the next group of people XD

Offline nikkiolie

  • It's over nine THOUSAND!!!!!
  • ******
  • Posts: 15368
    • Facebook
Re: Messenger viruses abound!
« Reply #13 on: November 07, 2008, 09:36:00 pm »
I haven't gotten it yet. I don't plan on it....;D

I trust my friends and I know the ones I talk to don't send me crap

Offline Sugarlat

  • Bunnygirl
  • *****
  • Posts: 3552
    • Youtube - Sugarlatdesu
Re: Messenger viruses abound!
« Reply #14 on: November 07, 2008, 09:44:34 pm »
Well that's a good thing.
My stupid messanger automatically downloaded it up i never opened the file so I was never affected.

Offline nikkiolie

  • It's over nine THOUSAND!!!!!
  • ******
  • Posts: 15368
    • Facebook
Re: Messenger viruses abound!
« Reply #15 on: November 07, 2008, 09:46:00 pm »
wow that sucks....i wonder if it automatically downloads all the time >_>

There was one person that kept sending me crap but I blocked them XD

Offline Sugarlat

  • Bunnygirl
  • *****
  • Posts: 3552
    • Youtube - Sugarlatdesu
Re: Messenger viruses abound!
« Reply #16 on: November 07, 2008, 10:52:29 pm »
XD nice!
I think everyone has gotten rid of the virus.
cept i hear ari is still affected, but I don't has her on my msn XD

Offline nikkiolie

  • It's over nine THOUSAND!!!!!
  • ******
  • Posts: 15368
    • Facebook
Re: Messenger viruses abound!
« Reply #17 on: November 08, 2008, 11:10:41 am »
that good to hear. I don't really know anyone that has gotten the virus.....maybe it was an attack against Tanis? =/

Offline Sugarlat

  • Bunnygirl
  • *****
  • Posts: 3552
    • Youtube - Sugarlatdesu
Re: Messenger viruses abound!
« Reply #18 on: November 08, 2008, 04:31:35 pm »
I donno, I first got it from Bella, then Kakashi, then Youko.

Offline nikkiolie

  • It's over nine THOUSAND!!!!!
  • ******
  • Posts: 15368
    • Facebook
Re: Messenger viruses abound!
« Reply #19 on: November 09, 2008, 04:08:17 pm »
That's too bad. I really don't have too many forum people's messenger and even if I did I don't really talk to many of them. I tend to talk with my closer friends....like Patrick and Sarah XD