View Full Version : Msn Messenger Virus


Mapoo
05-08-2005, 23:15
MSN MESSENGER VIRUS

This is not a joke please read it, My sister caught this virus today and also other people are getting the virus.

You will get a message from one of your friends it might say:

Hey is this you?

http: // Vbu lletin. msn. co.uk.me.crazy. lala @ hot mail. com

this is not a real link I have made, its just a Example of what you might see the name of the Link will be Vbulletin.

DO NOT CLICK THIS LINK CLOSE PM STRAIGHT AWAY IF YOU SEE THIS

The Link will open up a Download box and it will say your e-mail in the top of it and under MS-DOS and it will give you a choice of Open, Save As or Cancel, DO NOT CLICK THE LINK AND YOU WILL NOT SEE THIS DOWNLOAD BOX... IF YOU CLICK IT, Norton will delete straight away, XP firewall will turn off, System Restore on XP and other Operating Systems will Turn off and all other Windows Utilities will stop working, the only other way to get rid of this Nasty hard drive Virus is to FORMAT YOUR HARD DRIVE or use your RECOVERY CD's that came with you P.C...

Plz do not let yourself land in this direction, CLOSE THE MESSAGE BOX TO STAY SAFE

Thank You Very Much

FWD NOW TO STOP THE VIRUS

100% REAL INFORMATION

vidster
05-08-2005, 23:20
Originally posted by Mapoo




the only other way to get rid of this Nasty hard drive Virus is to FORMAT YOUR HARD DRIVE or use your RECOVERY CD's that came with you P.C...

It's very nice of you to warn people about this virus Mapoo but i can't agree with the above statement. We have some very talented and knowledgeable individuals around and we almost always remove any viruses someone might have :wink:

Thanks again for the headsup though! :thumbsup:

slh73
06-08-2005, 09:17
Originally posted by Mapoo
MSN MESSENGER VIRUS

This is not a joke please read it, My sister caught this virus today and also other people are getting the virus.




FWD NOW TO STOP THE VIRUS

100% REAL INFORMATION

Looks like a hoax to me. Was it your sister, or the sister of the person who forwarded the warning to you, or the sister of the person who fabricated the whole thing in the first place?

daverity
06-08-2005, 09:38
Thanks for the warning, just been trawling sites to find further details but can't find any mention of a latest virus being spread through messenger.
If I can find further details I will post them here.

Please CLICK HERE (http://www.cfr-ne.ch/images/humour/john/j_03/anti-virus.jpg) for anti-virus top tip :D

JoeP
06-08-2005, 10:16
In principle if you can send an executable link, you can use Messenger to send a trojan horse which could then run on your PC and compromise your system.

Having said that, I'm no expert!

Also, anything like MSN or Yahoo IM software that opens a TCP/IP port on your PC is open to attack - buffer overfow attacks, etc. that again could compromise your PC unless the software has been written to cope.

I did a little Googling and there are a few stories of an MSN propagated virus that uses Javascript / VBScript / some other executable to get at your PC. However, it's not really, IMO, MSN specific - it could just as easily be put on a web site and rely on you clicking the link.

Easy answer, don't click ANYTHING you're not sure of, especially if it's come from a total stranger!!

Joe

Joelc
06-08-2005, 10:23
I do belive this is a Hoax, nono of the beig AV companies have anything about it.

Joel

Cyclone
06-08-2005, 10:27
anything that ends 100% REAL INFORMATION is probably 0% real information.

JoeP
06-08-2005, 10:39
Originally posted by Cyclone
anything that ends 100% REAL INFORMATION is probably 0% real information.

I would agree - but you CAN send a link to an executable to someone in MSN that is clickable, and there is an 'exploit' that's been put in IE and MSN, I believe, to allow Microsoft to interrogate browser details more easily.

I think this story has probably grown from these other, more mundane, facts.

Joe

melthebell
06-08-2005, 12:59
i just tried that link (after taking all the spaces out) and.........................................it just went to MY hotmail ??

didnt try doing owt, or making me download owt, might be cos im on firefox tho, DO NOT TRY THE LINK unless you know what you are doing, or mad like me :)

i changed my hotmail password just incase tho, always makes me wary when a link opens my hotmail :P

Angel05
06-08-2005, 13:14
Originally posted by slh73
Looks like a hoax to me. Was it your sister, or the sister of the person who forwarded the warning to you, or the sister of the person who fabricated the whole thing in the first place?

Not that it really matters but its clearly obvious its mapoo's sister!

Well i'm taking it that way as thats how it reads :?

simonj
06-08-2005, 14:01
Any e-mail communication that contains a warning and has phrases like "100 percent genuine information" or "pass this on to all your friends" will undoubtedly be a hoax and are known in the trade as 'denial of service' messages, designed only to flood networks with unneccessary traffic, and in exceptional circumstances cause systems to crash.

JoeP
06-08-2005, 14:06
Originally posted by simonj
Any e-mail communication that contains a warning and has phrases like "100 percent genuine information" or "pass this on to all your friends" will undoubtedly be a hoax and are known in the trade as 'denial of service' messages, designed only to flood networks with unneccessary traffic, and in exceptional circumstances cause systems to crash.

Would have to be a crappy system to be bought to it's knees by a DoS attack based on e-mails sent by humans.... :)

But yes - more of a social engineering attempt rather than anything else.

Joe

slh73
06-08-2005, 15:54
Originally posted by Angel05
Not that it really matters but its clearly obvious its mapoo's sister!

Well i'm taking it that way as thats how it reads :?

Why is it obvious? They could have easily had the message forwarded to them in an email, and just copy and pasted the entire thing into here. And the original email could have been forwarded god knows how many thousands of times before that. Its a hoax. If there really was a virus around that could delete your copy of Norton, disable all windows security features, and bugger up your windows install, all the major AV sites would be shouting about it, and theyre not. Never believe anything you read in an email that tries too hard to convince you its not a big scam.

rich951
08-08-2005, 12:08
There are plenty of viruses/trojans that attempt to disable antivirus and other security software...

Mel - it sends you to hotmail because of the way you can use passworded URLs - http://username:password@domain - in this case the first bit is meant to look like a website but is really a username, which would presumably be ignored if the domain it sent you to was hotmail. My guess would be (assuming for a second for the sake of argument that the whole thing is genuine) the person posting it changed the address to hotmail to make it "safe" for crazy people like you who'll try it out :)

It could then be any old site hosting an IE exploit, which installs a virus/worm which sends that same message to everyone on your msn contacts. Or as mentioned here, just a link to an executable, hoping you are daft enough to run it. So it's theoretically possible, but if none of the AV sites mention it, I doubt it exists!

Greybeard
08-08-2005, 21:55
Originally posted by JoeP

I did a little Googling and there are a few stories of an MSN propagated virus that uses Javascript / VBScript / some other executable to get at your PC. However, it's not really, IMO, MSN specific - it could just as easily be put on a web site and rely on you clicking the link.

Easy answer, don't click ANYTHING you're not sure of, especially if it's come from a total stranger!!

Joe

I've had this (http://www.keir.net/scriptrap.html) onmy system for a few years now, but it's ony popped up with a warning a few times.

Seems stop any scrpts running unless you OK them.

bellis
08-08-2005, 22:34
i dont no if this is any use but i got a message on my msn tonight while i was out i clicked on a link and it was for somthing called mos dos application 190kb. foolishly i clicked on it but my norton blocked it it so if anyone gets somthing like this just bin it to be safe