msn virus

[SeCTor 1]

hello,
Yesterday evening a friend sent me a link that makes me download a. exe as a running *** I ... Since its regularly sending the link to my contact by closing my window jai full test of its not something I put you below a report HijackThis ...
if someone could help her would be nice. Best regards

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:55:55, on 01/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\system32\schtasks.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\jusched.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Windows\system32\conime.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Windows\System32\dfrgui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://msn.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)

I don't know what any of this means so some help would be great. Much thanks,

[shahid khan]

• Download Hijackthis http://castlecops.com/downloads-file-328.html.To Desktop
  
• Unzip it in a permanent folder of your choice, such as C:\HJT\. To create this specific folder on your hard drive: Double click the 'My Computer' icon on your desktop, then under the category hard disk drives: double click Local Disk:, then select file->New -> Folder and name it HJT. Alternatively,you may navigate to the directory of your choice, create a new folder in the same way, and save it there.
  
• Next right-click on the HijackThis! Zip file and 'extract all' to the new folder you just created.

To obtain your Reference HijackThis Log:

1. Double click the HijackThis.exe inside to folder to run the program.
2. Choose the "Do a system scan and save a log file." option to perform your scan.
3. HijackThis will analyze your system, and automatically open a notepad textfile containing the HijackThis log when the scan is finished.
4. Open the text files containing the logs with a text editor and click Edit -> Select All, followed by Edit -> Copy.
5. From within the browser window and with the message body text box selected, click Edit -> Paste.

[Navman]

hi
go to
http://www.pandasoftware.com
use activescan for online scanning ..
if it finds some files and won`t delete them (due to commercial reasons that might happen) copy&paste the report on the notepad, search the files and delete them. don't forget to unable your antivirus temporally before online scanning in case activescan won’t work, use this one its really good too
http://www.kaspersky.com/virusscanner
http://security.symantec.com/sscv6/h...RFNJSVSTIVVBEN

[Hasib]

The reason why people still develop viruses on msn is mainly because these viruses can be spread through people's contact list on msn messenger, and that's exactly how your msn / computer got infected.

How do the Viruses Spread on MSN?

You got this virus from your friend! Don't get mad yet. You have probably recieved messages on msn with something like "Do I look pretty on this picture (with a URL for you to click on)" or "Should I use this picture on Myspace (request you to receive a file)" all kinds of messages like these, your friends didn't mean to send you these messages, they got these messages before you did, and they clicked on the links or received the files. When they are infected, their msn account would automatically spread these messages (with virus) to friends on their friends' lists.

Symptoms:

1. Your computer could get really slow
2. Your msn might have connection problems (Which you could be shown offline but still spreading viruses)
3. Your Internet Connection gets slower than the usual speed.
4. Their might be popups with ads.
5. and more, depends on which kind of virus you got

.

Get rid of it now!

1. Restart your computer (Don't start msn messenger, if it automatically opens, change the setting in preference, then restart computer again)
2. Click "Start"
3. Click "Run"
4. Type "msconfig"
5. Go to the "Startup" tab.
6. Look for a file with the name "xxxsvc.exe" then uncheck it.
7. (optional: Only for certain kinds of msn virus) Open My Documents -->
   'Messenger Service Received Files'. Look for a file called PIC1234(1)(1)(1)(1)(1)(1)(1)(1).exe, hold "Shift" and "Delete" key to delete it.
8. Restart your computer (The virus should stop spreading by now)