MSN Photo Virus

"Want to see these pictures before I send these to Facebook"

"This is the picture that my friends put on MySpace of me don't show anyone"

"Is this you on CuteOrNot?"

Turns out that the pictures has a virus. No, I wasn't stupid enough to open them before I ran it through VirusTotal, but some of my friends were. I've been trying to help them remove it, (Disabling it in the Startup tab of msconfig, deleting the .exe in system32), but it seems to just pop back up.

Anyways, does anyone have any links or advice that could help eradicate this annoyance? (Signing onto MSN and getting hit with 15 messages does get annoying after awhile)

FYI - Some strange reason, some AVs don't pick it up.

#483910

What's the name of the virus?

As for AV programs detecting it, they have to have a definition or signature for it before they can detect it.

As for it popping back up, it most likely placed a registry key to execute it.

Common tactic for most infections of this type.

#483948

You're probably going to have use hijack this and some other tools.

I second rjohnstone's name request.

#483949

There is a tool that is out there called ComboFix that cured the problem back on 2006, but that hole in MSN security was patched ages ago.

Unless your friend is one of those idiots who refuses to apply Service Packs or updates, I'd be really curious about the name of said bug.

Could be a variant of the older one.

#483955

ive heard of somthing that will get rid of it but i can't remember lol

but i had no idea that it was all round the world... i do get hit by a bazillion messages.. annoying is a light term of abuse for this situation

#486250

Hmm I think I have something that cured an unremovable software on my brother's computer ...

I think it's "SmitFraudFix.exe" (mail me, I have it), you can try running it in safe mode but it worked as normal user for me. It's an console app and works pretty well for me. But don't forget, once you are done, reboot, and if it hangs, press the reset button so the virus doesn't reinstall itself.

Good luck !

EDIT : It's here.

#486251

I use restore point feature on Windows XP, this saved me in some situations the antivirus wouldn't.

Also I came with a pretty solution to the virus: I banned all infected contacts

#486271

god this is like 28 days later... banning "infected ones" lol:D

#486326