MSN virus going around..

Not sure if its a new virus..im pretty sure it is because when i google it i get no results..

its detected as "SHeur.APTL" by AVG and its a ".com" file.
-for example one of the ones that were sent to me was called "[email protected]"

2 msn contacts of mine are infected and what it does is, when a contact of theirs logs in(and i think when infected user logs in), it says some random crap like "look at this picture!" or "is this you?" and it sends a .zip archive with the .com application.

its removeable, i explained to a friend howto remove it with "HiJackThis" using the delete on boot method, for him the infected file sending this to his friends was called "C:\WINDOWS\system32\iquxkhumg.exe" - there was also "O4 - HKLM\..\Run: [twsrvgdzuwwk] C:\WINDOWS\system32\twsrvgdzuwwk.exe" but not sure if thats related , has him remove that too.
adds itself as a service, "O23 - Service: Print Spooler Service (xsoohliazuahko1) - Unknown owner - C:\WINDOWS\system32\iquxkhumg.exe" aswell as a HKLM\..\Run:

not sure if its a random filename or the same for all..but just trying to help.

 

As usual, be wary when accepting files from others.

I don't know if this is new or not, but these types of viruses have been going around for a long time now.

 

ah i see, first time ive seen anything like that..yesterday a friend has it and i helped him get rid of it, not too long ago today another has it..

 

Are you talking about the one a friend randomly says something like:

These are my new Facebook photos! I hope they aren't to kinky!

(File transfer whatever.jpg)

 

I saved my sister yesterday, She starts downloading it and on 22Kb to go i pull the plug out for her computer.

Most people don't even know they have the virus.

 

Yea... One of my friends has got that virus. No one lets me remotly connect to there PC, I have a bit of a reputation in school...

 

Heh,
My friend has this virus...
He's getting rid of it soon enough though

 

Reputation for pretend hacker, huh Typhoon?

I also believe if you use some other, non-standard client for MSN, you will not be able to send the messages from the virus. I am quite sure though you will still be able to receive infected files.

 

something like that, some random text and its not a .jpg though.
about 75kb.
anyways, i sent it to kaspersky and i guess its already detected..didnt know.

 

My friend is infected with that.
Whenever the infected logs in.
It says something like " I hope this isnt to raunchy for myspace " then has a clickable download file which says something along the lines of " pic_29294.jpg "
It isnt a jpeg however.
You click and download and then you are infected.

 

haha dude, this is old. I know so many people that have had it.. It's pathetic, why would you accept a .rar or .zip thru msn anyway?

 

Only way to defeat the virus is to tell the person and send them a link to this thread.