Hi
my 1st Post to the forum, Avast! looks the business but …
everytime I start MSN Messenger it tries to e-mail all online contacts with some stupid attachment like “sexy picture”! I’ve tried the lot, including turning off system restore, doing full scan, running the new MS Antispyware, reinstalling Messenger …
Anyone any suggestions, much appreciated.
Bill
Something would appear to have hijacked MSN Messenger - Try Adaware and Spybot Search and Destroy.
But I would suggest that you get hijackthis and run that.
Checkout - Eddy’s Website click the “HiJackThis Section” and also the “Malware removal instructions and applications” section, and follow the directions there and get back to us if you need more help…
HIJACKTHIS
For an on-line scan of your Hijackthis log file try here http://hijackthis.de/index.php
OR
Hi It is called Bropia M or N worm it is wild here ( I am a PC Tech by day) and since Feb 13. It has Infected Around 50+ people On My Daughters MSN IM list all her friends have it. and keep getting sent to us Pain In de Ass the Only scanner That has detected & removed was Trendmicro Housecall. And Iv been using avast For almost 3yrs+. was disappointed when avast didnt catch it.
It disables regedit & Task manager also disable or switches mouse buttons.
Do a google search for l0l_53xy_l0l.html and u will find it
Yaps
Bropia N, was appears to have been detected on the 15th Feb, according to the makers of Norton, Symantec.
http://securityresponse.symantec.com/avcenter/venc/data/w32.bropia.n.html
Avast virus data base was updated yesterday and the update included bropia F, so it`s possible that the next update, probably this friday, should include Bropia N.
Thanks all, appreciated. I eventually had to 1) start in safe mode, delete the files (the isass.exe and the files it creates in the root of the C drive) 2) clean up the registry manually (regedit then search for isass and delete every entry). This worked though as mentioned, now that all of my daughters contacts are infected, I need to watch that she doesn’t re-infect (easy done I think as neither Avast nor McAfee caught it first time round). I’ll check McAfee website to see if it’s keeping up with Symantec!)
It’s been a valuable, if painful experience. If the guy who wrote isass.exe is reading, please post you’re address and I’ll come round and pull out your eyes and stick 'em down your pants, so you can watch me kick the crap outta you, okay? Then I’m gonna use your tongue to paint my boat! (as Moe would say!)
Bill
theres a removal tool posted on the Symantec website
Iv sent the link to all my daughters contacts
yaps.