New Virus Going Round

[Booche]

Well i thought i would update my MSN and guess what i've been hit with some dodgy virus called FACEBOOK-PIC000934519.EXE.

Now it wont let me contact anyone on msn and ive looked on the net and it affects FaceBook and MSN so if you get anything like this it says to check A.S.A.P

Just a heads up just incase as my anti virus didnt pick it up for some strange reason when i updated :(

Im now scanning all drives to hopefully sort this matter out.

Bit of info about it:

* Cloaked Malware

File Behavior

FACEBOOK-PIC000934519[1].EXE has been seen to perform the following behavior:

* Executes a Process
* Injects code into other processes
* This Process Deletes Other Processes From Disk
* This process creates other processes on disk
* Modifies firewall settings, without user permission so it is not blocked from accessing the Internet
* Performs DNS look ups to resolve URL IP addresses
* Uses Instant Messaging to communicate without the user's knowledge
* Uses embeded Instant Message Channel Settings
* Uses rootkit techniques to conceal its presence, interrogation or removal

FACEBOOK-PIC000934519[1].EXE has been the subject of the following behavior:

* Executed as a Process
* Deleted as a process from disk
* Created as a process on disk
* Added as a Registry auto start to load Program on Boot up

FACEBOOK-PIC000934519[1].EXE can also use the following file names:

* 79798543.EXE
* 50840262.EXE
* 12976171.EXE
* 21443387.EXE
* NVSVC32.EXE
* FACEBOOK-PIC000934519.EXE
* FACEBOOK-PIC000934519 (1).EXE

This file has been seen with the following file size:

* 86,016 bytes

[Vectis]

Get a Mac :sofa:

[Booche]

Get a Mac :sofa:

:Censored: :Censored: :p

[NKR]

Get a Mac :sofa:

Do macs not get viruses? Genuine question as I don't know the answer.

[Charlie Brown]

Do macs not get viruses? Genuine question as I don't know the answer.

Nope. None whatsoever.

I have this virus now thanks to someone. :( ;)

[Corabar Entertainment]

How is it transmitted*, and what are the 'symptoms' (ie what's the first indication you've contracted it)?

(*I meant to say, other than during the update process for MSN)

[NKR]

How is it transmitted, and what are the 'symptoms' (ie what's the first indication you've contracted it)?

Good question as I don't want it. Also what virus protection software have the infected got? Also if its a Facebook Virus have you upgraded to that new profile setting.

Sorry for the questions but mitigation comes from knowledge. :D

[Booche]

How is it transmitted, and what are the 'symptoms' (ie what's the first indication you've contracted it)?

Well my first indication was that screens kept flashing on my desktop really fast mainly msn screens and when i right click and referesh the actual color of the text box is transperant etc and you cant contact no-one on msn :(

Run a test just to make sure and hopefully it gets rid of it

Ive searched my actual pc and cant find the file anywere that it says on the net :(

[NKR]

Nope. None whatsoever.

I have this virus now thanks to someone. :( ;)

So what are you symptoms Charlie?

[Charlie Brown]

So what are you symptoms Charlie?

I have managed to get rid of it through my super software but Dave popped up on msn asking me to look at this photo on FB.

I did (even though my computer told me not too :sj:) and then it started downloading something.

I managed to get rid of it ASAP.

[NKR]

I have managed to get rid of it through my super software but Dave popped up on msn asking me to look at this photo on FB.

I did (even though my computer told me not too :sj:) and then it started downloading something.

I managed to get rid of it ASAP.

Name the super software so we know what to use to cleanse ourselves. Appears to be MSN based as I have facebook on and you and booche as friends and its not bothered me.

See we are narrowing the possibilies.

[Vectis]

Nope. None whatsoever.

Not strictly true. But they do tend to be less prolific and far less invasive.

I could start a PC-bashing thread but it's probably wise to leave this here and focus on the current threat.

[Charlie Brown]

Guess Who says
Foto http://apps.facebook.com/eley[.....]rama/[email protected]

That's what Dave keeps sending me.

[Booche]

WooHoo think its been cleaned now and gone for good :P

EDIT: Nope not sorted :(

[Booche]

Well touch wood its sorted as i did the good old system restore and nothing seems to be wrong now :D

[Alex]

Guys... if anyone received this email :



Dear Messenger User,

We have just released a new version of Messenger which includes important security updates to help keep you and your friends safe while you chat online. All Messenger users will be required to have the latest version to continue using the service.

blah blah blah.....


thats one of the ways where this virus is contracted!!!
Just thought I'd give you a heads up!

[DiscosMobile]

TRY

Turn your system restore off (very important as the virus will turn your computer back to before it was deleted)

then google search and download tdss killer and that should get rid of it.. (tdss killer shows as a virus but its a false positive)

And then perform a virus scan using commando or antimalware

Rick

[discomobiledj]

I have managed to get rid of it through my super software but Dave popped up on msn asking me to look at this photo on FB.

I did (even though my computer told me not too :sj:) and then it started downloading something.

I managed to get rid of it ASAP.

I'm shocked Charlie, you being told not to do something, but ignoring it anyway.