[*] Main Menu

[*] Emoticons
News > New MSN Messenger Virus/Worm spreading
New MSN Messenger Virus/Worm spreading
Posted by admin on Thursday, October 27, 2005 (03:03:56) (17186 reads)
MSN Messenger 7 & MSN 7.5

A new worm/virus is currently spreading via MSN Messenger.

You may receive a message from a contact similar to the following format:

wow, this is you? http://www.messengerstats.net/profile.php?msn=email@hotmail.com
Do not click on the link within the message!

Update:
Although the threat seems to have been resolved, you should still not click on similar messages through MSN Messenger as other variants may be released.



This new MSN Messenger worm executable extracts 3 files to WINDOWS\system32\(random folder name)\. They are:

  1. csrss.exe
  2. smss.exe
  3. csrss.ini
All 3 files have the system and hidden flags set. Task Manager will not kill either of these processes, so go get a copy of 'Process Explorer' at www.sysinternals.com to kill them, and be sure not to kill the actual system processes!

Thanks to Jack Kaufman for the information above.



Associated Topics

NewsMSN Messenger 7 & MSN 7.5Windows Live / MSN Messenger 8.0


[*] Other Pages

[*] Article Rating
Average Score: 4.75
Votes: 4


Please take a second and vote for this article:

Excellent
Very Good
Good
Regular
Bad


[*] Options

[*] More stuff

[*] Survey
What is your favorite Messenger version?




Results :: Polls

Votes: 43122
Comments: 0

[*] Cool Sites

[*] More Sites

Copyright © 2001-2006 Messenger Tools .NET All rights reserved.
MSN Messenger is a product of Microsoft Corporation. This website is not affiliated with Microsoft.
The free MSN Display Pictures, Animated MSN Emoticons, MSN Names, MSN Winks and other content should not be copied without permission.