Hi, i already used Avast 4.7 home to try and get this virus off, called m3SrchMn.exe. It came from one of my friends on MSN and went like this “HI, i have a new pic of myself and wanted to put it on myspace, do you think this would be a good one to put there? (file here)” I stupidly clicked on it because he does send things like that some times, but then after I clicked on it, no picture came up and there was a file. Soon other people on my messenger said they were getting similar messages like “Hey, wanna see my dream car?(file)” so i went to run, msconfig, and found m3SrchMn.exe, which i disabled, it was in my startup area. But it continued, so i searched for it in run, and deleted it, but im still getting angry messages on MSN saying im still sending them out even though im not sending them(earlier it was “:look at this sunset, isnt it beautiful?” (file) or the myspace pic one), they say it appears in black type(i use red type on msn) and that they see it when they get on or when i do, sometimes more than once per session. will someone please help me?
Hopefully you have learned a valuable lesson and never take things at face value, messages can be faked to look like they come from friends or that could be infected.
I’m not entirely sure if the m3SrchMn.exe was/is the problem with MSN messenger as this seems to be something to do with mywebsearch, not great as many would consider this adware (and the problem seems to be continuing).
A google search for m3SrchMn.exe returns many hits, http://www.google.com/search?q=m3SrchMn.exe, just one http://www.yourtechonline.com/art16_mywebsearch.php.
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.
If using winXP or Vista SUPERantispyware On-Demand only in free version.
Program & Tutorial - Also useful as a diagnostic tool - FileHippo Download - HiJackThis - HJT Information HiJackThis Tutorial.
Download and run HJT and post the contents of the log file (cut and paste) into this topic, you may need to split it over two or more posts depending on how large it is.
I’ve bumped heads with this one before. it can get stubborn, but is fixable.
Follow DavidR’s suggestions for the hijackthis log and using superantispyware, but use the following settings.
Under Configuration and Preferences, click the Preferences button.
Then click the Scanning Control tab.
Under Scanner Options make sure the following are checked
- CHECK ALL BOXES
Return to the main page by clicking close on that screen. On the main screen, under Scan for Harmful Software click Scan your computer. On the left check C:\Fixed Drive.(and other fixed drives)
Under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan.
When the scan is done, quarentine everything found . Reboot if asked. You can post the log in your next reply if you wish.
Toy should also disable/turn off msn messager for now. It is a conduit in both directions.