MSN Virus

Solved
Thread Status:
Not open for further replies.
  1. TheHorla

    TheHorla New Member Bronze Member

    Joined:
    Jul 2, 2007
    Posts:
    7
    Likes Received:
    0
    Local time:
    10:13
    My System
    Loading...

    Hello there, I am not sure if this is in the right place.. or even if I should be posting this here...

    I am sure you have seen a lot of these complaints, I have been infected by an MSN virus. It was acquired by accepting a transfer from someone with a message like "hmm is this u in the pic?" or something like that. It sends the virus and a message like that to everyone on my contacts lists on any Instant Messaging service I use...

    I have tried various methods from searching Google, but none of what I find actually IS like my problem, just resembles. I have yet to find a virus scan that finds it ( I have tried many)

    So I humbly ask if there is anyone that can help me with this problem?
     
  2. GaRHaR

    GaRHaR Well-Known Member Tech Member Elite Member

    Joined:
    Jul 3, 2006
    Posts:
    6,159
    Likes Received:
    37
    Local time:
    17:13
    My System
    Loading...

    Hi TheHorla, welcome to the PCHF.
    Can you please follow the prework link in my signiture and post the resulting logs back here? Our security team will be more than happy to take a look for you :)
     
  3. pgriffin22

    pgriffin22 Member Silver Member

    Joined:
    Jul 2, 2007
    Posts:
    115
    Likes Received:
    0
    Local time:
    09:13
    My System
    Loading...

    *welWhich anti virus packages have you used, if you have used all the major ones and they haven't worked then i suggest that you get in touch with the MSN team and ask them what to do.
     
  4. chiaz

    chiaz Well-Known Member Elite Member

    Joined:
    Jun 7, 2006
    Posts:
    4,685
    Likes Received:
    75
    Local time:
    09:13
    My System
    Loading...

    I doubt that they will have much to contribute, still worth a try if you like though.


    But I think the immediate priority now is to perform the Prework. More often than not it will get rid of the problem before you even get to say "Whoa".
     
  5. TheHorla

    TheHorla New Member Bronze Member

    Joined:
    Jul 2, 2007
    Posts:
    7
    Likes Received:
    0
    Local time:
    10:13
    My System
    Loading...

    Hello there, I have redownloaded AVG, as my version was corrupted somehow by an accidental cancellation of an update. I have finally found a symptom of the virus, or I believe - this actually being the first; it appears I cannot Change/Remove programs from my programs list in Control Panel..... to add to this there are...quite a few programs on this list I have never seen.. I will start the Prework now.

    Edit: Actually, no AVG will update for me, it always shows as an error in updating... It may be a problem with the virus as well, I do not know. I follow the links on the Prework page when I download it.

    I have used AVG, McAfee, Pest Patrol, and a-squared.
     
  6. TheHorla

    TheHorla New Member Bronze Member

    Joined:
    Jul 2, 2007
    Posts:
    7
    Likes Received:
    0
    Local time:
    10:13
    My System
    Loading...

    I could not get an AVG log, but here are the other two (I believe).

    I hope very much that this problem can be solved without reformatting :oops:

    As for now, I am now going to throw myself at the mercy of someone I hardly know, who is saying to uninstall all virus scanners and use a Symantec Corperate Edition that he sent. Something about various virus scanners conflicting with each other...

    Edit: Can't do that if I cannot uninstall the things he says I should for his help.
     

    Attached Files:

  7. chiaz

    chiaz Well-Known Member Elite Member

    Joined:
    Jun 7, 2006
    Posts:
    4,685
    Likes Received:
    75
    Local time:
    09:13
    My System
    Loading...

    Well you have both McShield and AVG on the system? Do you usually have both running together at the same time?


    Please run HijackThis and place a checkmark by the following entries:
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll (file missing)
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll (file missing)

    Close all other windows except HijackThis and press "Fix Checked". Then close HijackThis and restart the computer.


    Download MsnCleaner_eng.zip from here, but don't use it yet.
    http://www.forospyware.com/Msncleaner/MsnCleaner_eng.zip
    (Copy/Paste the URL into the address bar or use "Save Target As")

    • Now reboot into Safe Mode
    • Double-click MsnCleaner_eng.exe to run it.
    • Click the Analyze button.
    • A report will be created once after you finish scan.
    • If it finds an infection, click the Deleted button.
    • Now, please reboot back to normal mode.
    • Please attach the contents of C:\MsnCleaner.txt in a reply to this post, along with a new HijackThis log.
     
  8. TheHorla

    TheHorla New Member Bronze Member

    Joined:
    Jul 2, 2007
    Posts:
    7
    Likes Received:
    0
    Local time:
    10:13
    My System
    Loading...

    The MSNCleaner did not find anything, this may actually be due to me manually deleting myalbum2007 (the cause of this little problem) after it attempted to send itself to a friend. I have checked several times, it has not recreated itself.

    I could not find:
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll (file missing)

    At all, this a problem?


    By the way, what is the deal with my Add/Remove programs having strange programs on it, and me not being able to Change/Remove anything? I am sure that is a problem...
     

    Attached Files:

  9. chiaz

    chiaz Well-Known Member Elite Member

    Joined:
    Jun 7, 2006
    Posts:
    4,685
    Likes Received:
    75
    Local time:
    09:13
    My System
    Loading...

    What strange programs do you have in Add/Remove Programs?

    Please use this uninstaller at NewDotNet
    Use procedure 4 to remove it. It requires that an internet connection be active while doing it.
     
  10. TheHorla

    TheHorla New Member Bronze Member

    Joined:
    Jul 2, 2007
    Posts:
    7
    Likes Received:
    0
    Local time:
    10:13
    My System
    Loading...

    And the list begins:
    4200
    4200_Help
    4200Tour
    4200Trb
    AiO_Scan
    AIOMinimal
    AiOSoftware
    BufferChm
    Copy
    CreativeProjects
    CustomerResearchQFolder
    Destinations
    DeviceFunctionQFolder
    DeviceManagementQFolder
    DocProc
    eSupportQFolder
    mCore
    mDrWiFi
    mIWA
    mIWCA
    mLogView
    mMHouse
    mPfMgr
    mPfWiz
    mProSafe
    mSSO
    mToolkit
    mWlsSafe
    mXML
    mZConfig
    Overland
    QFolder

    They may be different names for programs, but something is definately up!

    I will try the program you suggest.

    I am sorry, but how is NewDotNet supposed to help me if it is for removing their software?
     
  11. chiaz

    chiaz Well-Known Member Elite Member

    Joined:
    Jun 7, 2006
    Posts:
    4,685
    Likes Received:
    75
    Local time:
    09:13
    My System
    Loading...

    They have an uninstaller on their website that supposedly works.

    Do you get an error message?
     
  12. TheHorla

    TheHorla New Member Bronze Member

    Joined:
    Jul 2, 2007
    Posts:
    7
    Likes Received:
    0
    Local time:
    10:13
    My System
    Loading...

    See the attachment for an accurate description. It does that on everything.

    All I can do is see size (if it has one) and how often I use it. Not to mention how many programs AREN'T on there that should be...
     

    Attached Files:

  13. chiaz

    chiaz Well-Known Member Elite Member

    Joined:
    Jun 7, 2006
    Posts:
    4,685
    Likes Received:
    75
    Local time:
    09:13
    My System
    Loading...

    First time I have encountered such a thing. Let's see if we can fix it.

    Do you have CCleaner from the Prework? Run it again, but this time go to Tools > Uninstall. For all the programs that you do not recognize, click "Run Installer". This page may also help:
    Some applications in Add/Remove Programs list are missing Change and Remove buttons ?


    Let me know how it goes. :mrgreen:

    * In the unfortunate event that you accidentally delete something legitimate, do create a System Restore point before you do the above.
     
  14. TheHorla

    TheHorla New Member Bronze Member

    Joined:
    Jul 2, 2007
    Posts:
    7
    Likes Received:
    0
    Local time:
    10:13
    My System
    Loading...

    I think I find that action a tad bit too risky... perhaps someone else may know about this problem. Else would reinstalling my OS remove this?

    I do not know if the virus is gone, either, by the way.
     
  15. chiaz

    chiaz Well-Known Member Elite Member

    Joined:
    Jun 7, 2006
    Posts:
    4,685
    Likes Received:
    75
    Local time:
    09:13
    My System
    Loading...

    Does CCleaner work?

    That would likely help a lot, given the many problems you currently have on your PC.
     
Similar Threads
Forum Title Date
System Security mabm detect pup's and avast virus Jul 31, 2014
System Security Virus/Adware Jul 31, 2014
System Security FB virus perma spam Jul 27, 2014
System Security Looking for a good free antivirus Jul 24, 2014

Thread Status:
Not open for further replies.