Warning New Msn Virus !

a New Messenger Virus are going on the Messenger now my friend on Messenger was offline than he did send me a link like this hxxp://site.hi5-photos.net/images.php?=hdhdhd@hotmail.com with my own hotmail that you going on the site you will ask if you wanna save or Run a program if you take Run program the virus will spam to your all on your messenger list a a dress with hxxp://site.hi5-photos.net/images.php?=Theirs hotmail.

if you take Drive it will auto take you to one site ddd.burimilol.com

when you going on a site.

when the virus than working it will shut down your mouse so you cant use it change you Webpage and you can only look when messenger friends windows comming up fast and close verry fast than mean the virus send links…

Thanks for the notice, I have sent a report to virus(at)avast(dot)com and a link to this topic, hopefully they will investigate it soon.

Welcome to the forums.

thx The virus name off the virus are trojan.vundo-variant/small-Gen who are in The memory
Next virus are unclasssified unknown orgin who are in registry items

next virus are trojan.vundo-varaint/nextgen registry items

next virus are rouge component/trace

total viruses are

1 in memory

7 in registry

1 in filed items.

If you have XP, vista32bit or Win2k, you could enable a boot time scan. Right click the avast icon, select Start avast! Antivirus, a memory scan will take place followed by the opening of the Simple User Interface, Menu, ‘Schedule boot-time scan…’ Or see http://www.digitalred.com/avast-boot-time.php.

I would also suggest using some other tools just to be on the safe side.

If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode and report the findings (it should product a log file).

  1. SUPERantispyware On-Demand only in free version.

  2. MalwareBytes Anti-Malware, On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later.

Hopefully you have learnt a valuable lesson in not taking things at face value, it is easy to fake who an MSN Messenger message is from. There is also the possibility that your friend or another messenger user with your details in their contacts, etc. and it is using that info to fake who it is from and send to all contacts, etc.

yes i have do it my computer are 100% clean Thx now my friend got Same virus and superantispyware have not finnish the scan yet but we have find 149 viruses like 2 of the virus have avast found but cant delete them

Some examples of the 149 viruses (which I suspect many are cookies) would help.

e.g. malware name, file name and location.

And why can’t you delete them (and which program are we talking about, avast, SAS or MBAM), error messages displayed.

As you can see we thrive or die on information or the lack of it.

I’ve done a full scan with SUPERantispyware, a full scan with malwarebytes and a full scan with my own anti-virus programm “F-secure client”…

Still, when I open MSN I get flashes of MSN-screens that auto-send links to people. Also, in my C:/ there’s a programm called “pps.exe” or sometimes “p8.exe” that sometimes pops-up as a black screen with a moving with a moving with “-” in it … that can make my screen freeze.

Can someone please help me?

So I take it that you are either not using avast or have two resident AVs installed which is not advised ?

Did you run those two from safe mode, as they are more effective in safe mode, especially in terms of removal.

You could also check the offending/suspect file/s at: VirusTotal - Multi engine on-line virus scanner .

We obviously can’t give you any advice on f-secure as this is the avast antivirus support forum and we (or I) know nothing about f-secure.

Ok sorry.
I’ll download avast then.

I’ve been able to delete all viruses, there’s only one problem left:

The programm “pps.exe” / “p8.exe” is now called “biin.exe”.
I think this is the “source” of the msn virus-problem. It keeps showing up whatever I do in my C:/

Nothing to be sorry about, just trying to confirm what you are using. Before installing avast ensure you uninstall f-secure and reboot.

It doesn’t matter too much what the file name is upload the suspect file to virustotal (39 different scanners so it will get a thorough scan) to confirm your suspicions.

If you haven’t already downloaded those other applications and run them from safe mode I would suggest that is a priority.

I was recently infected with this virus and and it not only sends to those people listed on you msn that have msn but those who have yahoo messenger as well and instead of being sent as say matt123456789@hotmail.com it would say matt123456789@yahoo.com

I downloaded f-secure when i was looking for an anti-virus for WINDOWS VISTA X64… and it was the worst thing i could have done, it will not let me uninstall the damn program, there is no uninstaller for that program, and i have try using RENO UNINSTALLER, and the same thing, it will not remove the damn thing…

so stay away from using f-secure!!!
and its not free, tells u after you need to purchase the damn thing…

“hxxp://site.hi5-photos.net/images.php?=@.***”

Hi! Please help me! How can I remove this virus from my computer. What is the name of virus? I read your long description, but I would like to know, which is the suitable program to remove this malicious software? Is this software is virus, trojan, spyware, malware or adware? Please reply as soon as possible. Thanks the help. Bye!

i would rekommend donlowad superantispyware scan computer delete all virus restart computer scan agin and delete and agin 3times you will do that the 4time you scan its will say your computer are clean.