Stupid MSN Troyans -.-

[Tajin]

So, the users around here are quite slow for the internet thingie and will accept files from pretty much everywhere. Now, im not tired at all of format / reinstall, it pleases me deleting their MP3s and stuff, but if any of you has found this virus and has some form of removal tool or ideas, it will be appreciated.


The latest virus name is: myphotos2007.zip and includes this file: DSC515607.jpg-www.pictureland.com

it auto-sends to all the MSN contacts of the infected user.

i looked in some sites, but there is like 10 variants, so i dont know where to look any more.


Also, NOD and Norton wont detect it.


P.S. Blocking the MSN is not an option nor blocking from the firewall, since this place sucks <_<a

[Sigi]

Avast! is really good about stopping crap from MSN/AIM/Yahoo! .

I assume that there's a company policy allowing IM during work? If you are the IT person in charge, you might want to call a meeting to educate the users.

Bar that, about the only thing that would stop the annoyance is to remove the ability to IM from the work terminals, and have a break-room system that is anything goes.

[Killgannon]

if you cant stop it on the firewall its hard to stop... if you have no control over that stuff than you're just screwed pretty much =/ if you browse the norton site or various other antivirus sites (besides mcaffee as they like to break the interwebs... no joke... they released a patch that broke the interwebs and people couldnt go anywhere but secure sites... it was loolz) there should be a tool released soon that will fix all variations of it

[Fallso]

boot PC up in safe mode, run your anti-virus software (if you have norton/McAffe then I won't help you..<_<)

[Shuemue]

Just ban MSN until there's a fix released.

[Tajin]

Thanks for the replies :D

[Guyverarmor]

Delete System 32 8)

J/k boot It In safe mode and run any Virus scan. I know Mcaffee released a new version of STINGER, which Is pretty at pin pointing and deleting specific viruses and their variants. Should help maybe