MSN virus going around..

[hmm]

Not sure if its a new virus..im pretty sure it is because when i google it i get no results..

its detected as "SHeur.APTL" by AVG and its a ".com" file.
-for example one of the ones that were sent to me was called "[email protected]"

2 msn contacts of mine are infected and what it does is, when a contact of theirs logs in(and i think when infected user logs in), it says some random crap like "look at this picture!" or "is this you?" and it sends a .zip archive with the .com application.

its removeable, i explained to a friend howto remove it with "HiJackThis" using the delete on boot method, for him the infected file sending this to his friends was called "C:\WINDOWS\system32\iquxkhumg.exe" - there was also "O4 - HKLM\..\Run: [twsrvgdzuwwk] C:\WINDOWS\system32\twsrvgdzuwwk.exe" but not sure if thats related , has him remove that too.
adds itself as a service, "O23 - Service: Print Spooler Service (xsoohliazuahko1) - Unknown owner - C:\WINDOWS\system32\iquxkhumg.exe" aswell as a HKLM\..\Run:

not sure if its a random filename or the same for all..but just trying to help.

 

[cp]

As usual, be wary when accepting files from others.

I don't know if this is new or not, but these types of viruses have been going around for a long time now.

 

[hmm]

ah i see, first time ive seen anything like that..yesterday a friend has it and i helped him get rid of it, not too long ago today another has it..

 

[Red Dwarf]

Are you talking about the one a friend randomly says something like:

These are my new Facebook photos! I hope they aren't to kinky!

(File transfer whatever.jpg)

 

[Macroman]

I saved my sister yesterday, She starts downloading it and on 22Kb to go i pull the plug out for her computer.

Most people don't even know they have the virus.

 

[Typhoon]

Are you talking about the one a friend randomly says something like:

These are my new Facebook photos! I hope they aren't to kinky!

(File transfer whatever.jpg)

Yea... One of my friends has got that virus. No one lets me remotly connect to there PC, I have a bit of a reputation in school...

 

[aznhmg]

Heh,
My friend has this virus...
He's getting rid of it soon enough though

 

[cp]

Reputation for pretend hacker, huh Typhoon?

I also believe if you use some other, non-standard client for MSN, you will not be able to send the messages from the virus. I am quite sure though you will still be able to receive infected files.

 

[hmm]

Are you talking about the one a friend randomly says something like:

These are my new Facebook photos! I hope they aren't to kinky!

(File transfer whatever.jpg)

something like that, some random text and its not a .jpg though.
about 75kb.
anyways, i sent it to kaspersky and i guess its already detected..didnt know.

 

[ownage overdose]

My friend is infected with that.
Whenever the infected logs in.
It says something like " I hope this isnt to raunchy for myspace " then has a clickable download file which says something along the lines of " pic_29294.jpg "
It isnt a jpeg however.
You click and download and then you are infected.

 

[Xx Forgotten Xx]

haha dude, this is old. I know so many people that have had it.. It's pathetic, why would you accept a .rar or .zip thru msn anyway?

 

[Macroman]

Only way to defeat the virus is to tell the person and send them a link to this thread.