Best Australian PSP Community, News, Games, Videos, Competitions, and Forums. Mario Galaxy, Metroid and More!

Social \ MSN Virus. Need Help

1 2 Next »

Kudos: 6,980

Mates: 84

Hey guys,
i did the stupidest thing yesterday. a friend of mine said to me (on msn) "look these pics i was asked to put on the internet" so i downloaded the pics and looked at them. They where no picture files (they where MS Dos (or something like that)) files. being the trusting person i am(thought it was from a friend), opened it.]

Now it randomly sends the same message (or slightly different) to people who log on without me doing it. I have changed my name to a warning telling people not to accept it but it is still realy annoying.

My 2 virus protection programs found a bunch of viruses, so i deleted them all, but it still happens

Does anyone have any ideas on how to fix this

03/11/2007

Kudos: 3,757

Mates: 77

Cherrona says:

That sucks BJ.

Take your computer tower to a computer expert and have them fix it. You'll have to pay of course, but at least everything should be fixed.

03/11/2007

Silent Hill - The fear of blood tends to create fear for the flesh

Kudos: 6,980

Mates: 84

BJ2 says:

yeah, i wanna try lots of things first though. and our computer expert comes to us

do i think an un-install then a re-install will work?

03/11/2007

Kudos: 1,291

Mates: 6

hmmnodice says:

1get an exact copy of the message it sends (copy paste) into google where it will tell you about the virus and virus name then the removal.
2Try another AV
3ALso if no luck then try system resotre
4THen if still no luck do a format

03/11/2007

'sick of answering simple questions over and over and over again that you can find on google'

Kudos: 3,757

Mates: 77

Cherrona says:

hmmnodice said: 1get an exact copy of the message it sends (copy paste) into google where it will tell you about the virus and virus name then the removal.
2Try another AV
3ALso if no luck then try system resotre
4THen if still no luck do a format

Most of that went waaaaaaay over my head.

And the scary thing is, I'M the one who takes care of my computer (at least I know how to turn it on. ^_^ That's always a plus.

).

Good luck getting everything fixed, BJ. Damned viruses.

03/11/2007

Silent Hill - The fear of blood tends to create fear for the flesh

Kudos: 374

Mates: 25

boostn7 says:

that won't work. most of these msn viruses write straight to the whole windows registry. making a command like "do this, do that". Have you ever noticed, when you uninstall a program, the folder still exists in program files? Thats because it wants to keep the same config files if you ever want to reinstall it. So uninstall, delete the folder, then reinstall. I guess that bit'll work.

03/11/2007

Southside Brisbane

Kudos: 1,679

Mates: 92

raybert says:

was that the pic you sent me last night BJ2? cause i havent opened it yet. You said Put this new pic on my slideshow or something.

03/11/2007

Brisbane (+.[____]·:·) 'Co-Leader 2 of EA Games Gang'

Kudos: 6,980

Mates: 84

BJ2 says:

yeah, as i said, the message varies from something like what raybert said to "Look at these naked pics of me"
i did just that boostn7, i thought it was odd that the file stayed there too. well i've done it, anyone who has my msn, please tell me if it still happens to you

03/11/2007

Kudos: 3,492

Mates: 247

RussDogg says:

i got that i got trogan horse i had to re install windows to fix it and whipe every thing

03/11/2007

EA LEADER| EA- Sergeant Major

Kudos: 12

Mates: 0

junkrunner says:

i got this thing to, to get rid of it i uninstalled msn and then did a virus scan (mcafee)... reinstalled msn = virus gone

03/11/2007

brisbane

Kudos: 5,471

Mates: 83

camlew2 says:

Spybot search and distroy- email me and im happy to send the program on
camlew2(AT)hotmail(DOT)com

03/11/2007

www.camlew.com | Melbourne, Victoria

Kudos: 374

Mates: 25

boostn7 says:

camlew2 said: Spybot search and distroy- email me and im happy to send the program on
camlew2(AT)hotmail(DOT)com

lol, that sounds like a virus too...

03/11/2007

Southside Brisbane

Kudos: 3,757

Mates: 77

Cherrona says:

BJ2 said: yeah, as i said, the message varies from something like what raybert said to "Look at these naked pics of me"

O_O Ok, if I got a message like from someone while chatting on MSN, I would be ending the conversation and blocking them from my MSN thingie for good.

03/11/2007

Silent Hill - The fear of blood tends to create fear for the flesh

Kudos: 5,471

Mates: 83

camlew2 says:

boostn7 said:
camlew2 said: Spybot search and distroy- email me and im happy to send the program on
camlew2(AT)hotmail(DOT)com

lol, that sounds like a virus too...

well you must be a noob then, Spybot search and distroy is one of the best spyware removers

03/11/2007

www.camlew.com | Melbourne, Victoria

Kudos: 8,859

Mates: 95

repopulating says:

Thought all Messenger worms were rooted out? Think again, they're still running rampant. Recent reports include a worm that spreads by the imageXX.zip filename (eg. image13.zip) and drops rpmsvc.exe when the imageXX.JPG-www.photobucket.com inside the zip file is executed. The file transfer is usually preceded by one of the following messages:

This picture isnt you... right?
newest pics for ya
hey did i ever show you this picture of me?
is it ok if I add this pic to my new slideshow?
can i up some of these pics of ya to my myspace profile?
Wow i think i found your pic on myspace!
hah I think I found an old pic of us!
haha lets hope your parents dont see this picture of you
you care if i put this pictuer of you in my new album?
OMFG!!!!!!!!
wow! look at this old picture i found
sorry about the messup i fixed the pic! Try it one more time pz
is this pic tooo sexy for photobucket??
>> You can find a complete list here.

If you're one of the unfortunate victims that accepted the transfer and opened it, here are the removal instructions:

1) Run regedit.exe and delete the following registry entry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"Remote Terminal Service" = "rpmsvc.exe "

2) Restart Windows.

3) Delete the virus files:

%System%\rpmsvc.exe (Read-only, System, Hide attribute)
%temp%\imageXX.zip

Another worm dubbed Warezov.* (or Stration) is spreading through the following link: .l-a-d-e-t-u-irunhandesuijin.com/ and triggers the download of photo.exe. So whatever you do, don't!

03/11/2007

lol

Kudos: 15,103

Mates: 204

IAMColonel says:

If that's a direct link to the virus, it might be a good idea to delete it, or at least remove http so it doesn't directly link.

03/11/2007

Those damn pipe dreams.

Kudos: 8,859

Mates: 95

repopulating says:

I added dashes to it

03/11/2007

lol

Kudos: 6,980

Mates: 84

BJ2 says:

most of that stuff flew past me.............

03/11/2007

Kudos: 419

Mates: 9

Jimmy_IV says:

could have been a keylogger...

03/11/2007

EA - Private First Class

Kudos: 524

Mates: 53

LiLfiLo says:

hi people.

can we reboot computers ourselves or do we have to take it to an expert.

if not can someone please help me.

i have lots of unwanted files on my computer causing it do open files slowly.

i ahve been on the thread tips on how tomake your computer faster and it is exactlye the same.

help would be appreciated

04/11/2007

Melbourne, Victoria

Kudos: 5,471

Mates: 83

camlew2 says:

Download a few anti virus programs (Do it from another PC then put them on CD or mem stick)
A few excellant programs
Ad-aware
Spybot- Search and Distroy
Mcafee- Stinger

04/11/2007

www.camlew.com | Melbourne, Victoria

Kudos: 3,532

Mates: 42

Pongo says:

this is one of the eisiest virus' to get rid of. The ImageXX.zip as i call it.

1. change your msn name to "dont download anything i send, i have a virus"
2. open my documents and run a search for the image zip folder, when my sisters friend got hers it was Image09.zip so search for the number you got sent.
3. it will find a whole lot of them in a system folder, Go to that folder (i think its in the windows folder) and locate the ImageXX.zip virus.
4. There will be about 30 or more all from Image01.zip to image(something or rather).zip this is the easy bit.
DELETE THEM ALL WITH SHIFT+DELETE. to get rid of them straight off your PC
5. run a search again for the images and see if there are any left.
6. change your msn name back
7. dont be so silly next time!

:D (this has been a guide from Pongo inc.)

Actualy keep your msn name like that just in case. its back on my mates comp and he didnt download anything (though i have suspicians) do if you do have a virus, follow repops guide)

04/11/2007

definitely

Kudos: 5,710

Mates: 54

Lewace11 says:

If none of that works, get a perging proggy, and just delete the MSN folder of the programme files. Beware though, only use as a last resort, it can leave your registry files still in the format for MSN, so it can cause problems. Once you've removed it, do a full virus scan, get rid of the MS-DOS application and then re-install MSN. It should work. I accept NO responsibility for any damage done.

MS-DOS proggy's are like core programmes for Windows. to stop this happening again:
Get another OS (NOT Mac. Get Linux, openSUSE is good. My fave

)

04/11/2007

www.lewace11.co.uk |::| Scottish Borders, UK

Kudos: 6,980

Mates: 84

BJ2 says:

thanks everyone, it should all be done by lunchtime

(virus searching takes awhile)

04/11/2007

Kudos: 5,471

Mates: 83

camlew2 says:

Email sent to you BJ2

04/11/2007

www.camlew.com | Melbourne, Victoria

1 2 newer »

To participate in this discussion, please log in or register.

MyPSP Says:

Polls

Choose a favourite, take your pick: 29

Games

Blade Dancer
Ape Academy
Shrek The Third
Wild Arms XF

News

Sega Know Sonic Needs a Revival

19 mins ago 1 0

Portable Mass Effect?

1 hours ago 1 0

THQ have canceled Destroy all Humans for the PSP

2 days ago 7 5

MyMedia Retrospective - Nintendo 64DD

31/07/2008 20 3

Japan Addicted to the PSP

26/07/2008 11 10

Listings

MyPSP Miscellaneous - $50.00

16 Jul 2008 - 23:44

MyPSP Miscellaneous - $50.00

13 Jul 2008 - 03:53

bricked psp with games and heaps of accessories and free postage - $160.00

05 Jul 2008 - 01:19

MyPSP Miscellaneous - $50.00

01 Jul 2008 - 22:40

MyPSP Miscellaneous - $50.00

25 Jun 2008 - 17:44

Videos

PicoDrive on PSP Pop Full Mail
TNA iMPACT!: A.J. Styles vs Shannon Moore
Bricked PSP Slim
Mario Theme Played with RC Car and Bottles

Best Photos

25 156
27 49
36 47
39 29
7 25
24 20

Comments

Choose a favourite, take your pick:	insectoid	1 hours ago
Final Fantasy VII Crisis Core	dswiirockz	1 hours ago
Choose a favourite, take your pick:	Lawso	2 hours ago
Choose a favourite, take your pick:	xXCaseYXx	3 hours ago
Field Commander	haloce	3 hours ago
PQ: Practical Intelligence Quotient	haloce	3 hours ago
My PSP game collection	haloce	3 hours ago
Simpsons Game, The	Jimmy3cool	4 hours ago
Choose a favourite, take your pick:	pspmail	4 hours ago
Choose a favourite, take your pick:	gdmatt	7 hours ago

Everyone is...

happytimes: it was my bday yesterday.....

xXCaseYXx: is hungry. nothin in the cupboard =[ =Y

milolamb: SICK IN HOSPITAL WITH TONSELITES... Hoy cruddi -.- I hate tonsels

annirowe: Econochrome is doing my head in!!!!!!

skulldugg: I also want the new echochrome game

$39.5
$73.74
$44.1
$45.97
$54.35
$75.51
$28.93
$28.12
$74.15
$47.13

Send us news tips!