have antivirus companies been warned of.....

There seems to be alot of ppl getting the picture virus
through msn messenger. are they accepting a file or wat?
ppl are saying when the send a message they see japanese
women and sum txt and it takes them to a website.

I just want to know if msn has informed antivirus
companies about this problem??????

and wat is the msn team doing to stop this??? maybe u need
to email everyone and tell them not to open a particular
attachment with the file name ???



sum fixes were this:

Close Messenger. This will simply stop any of your
contacts getting the virus.
2. Goto 'Start' then 'Run' and type 'msconfig'. A new
window should appear.
3. Click on the tab at the top right that says 'Startup'.
4. Untick the box next to 'MSN Messenger'.
5. Click 'ok' and when it asks if you want to restart your
computer say no.
6. Press 'Ctr' + 'Alt' + 'Del'. Find the file that
says 'MsgSpread' and click End Task.

The virus has now been deactivated!

To remove it fully follow these instructions:

1. Goto the Desktop and open My Documents.
2. Double click on 'Messenger Service Received Files'. If
you dont see a folder called that then goto 'My Computer'
then goto 'C' then 'Program Files' and finally 'Messenger
Service Received Files'.
3. You should now see a file called 'PIC1234(1)(1)(1)(1)(1)
(1)(1)(1).exe'.
4. Click on it ONCE and press 'Delete'. This should delete
the file.
5. Empty your Recylce Bin.

The virus has now been fully removed!



there is also a removal tool d/l here:

http://www.2-spyware.com/file-pic1234-exe.html

click on download scanner and remover



sum fixes were this:

1.go to Run -> regedit
2.go to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersio
n\Run
3.after there, remove "realone_nt2003"
and "realone_nt2004"

4.then, go to C:\Windows\System32
5.find and remove "MONIKER.EXE", "SYSLRAY.EXE", "HKT1.DLL"
- (is sys"L"ray, not sys"T"ray, becarefull)
- (if u cannot remove moniker.exe or syslray.exe, u
ctrl+alt+del, go to process, u end the process of this
two)

6.then uninstall msn messanger
7.restart pc
8.reinstall msn messanger again
9.done

Nigel
Tue Sep 14 16:42:05 CDT 2004

anonymous@discussions.microsoft.com typed:

> There seems to be alot of ppl getting the picture virus
> through msn messenger. are they accepting a file or wat?
> ppl are saying when the send a message they see japanese
> women and sum txt and it takes them to a website.
>
> I just want to know if msn has informed antivirus
> companies about this problem??????
>
> and wat is the msn team doing to stop this??? maybe u need
> to email everyone and tell them not to open a particular
> attachment with the file name ???

Yes, spam millions of MSN users to tell them not to open attachments they
weren't expecting .. of course, that's common sense and if anyone is daft
enough to open unsolicited emails, attachments, or files through MSN, then
frankly, they shouldn't own a PC in the first place!

--
Nige

Jonathan
Tue Sep 14 16:56:18 CDT 2004

Hi,

Messenger "worms" have been going around for years, this isn't anything new.
____________________________________________
Jonathan Kay
Microsoft MVP - MSN Messenger/Windows Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com
All posts unless otherwise specified are (c) 2004 Jonathan Kay.
You *must* contact me for redistribution rights.

<anonymous@discussions.microsoft.com> wrote in message
news:0e8901c49a9f$a6752870$a601280a@phx.gbl...
> There seems to be alot of ppl getting the picture virus
> through msn messenger. are they accepting a file or wat?
> ppl are saying when the send a message they see japanese
> women and sum txt and it takes them to a website.
>
> I just want to know if msn has informed antivirus
> companies about this problem??????
>
> and wat is the msn team doing to stop this??? maybe u need
> to email everyone and tell them not to open a particular
> attachment with the file name ???
>
>
>
> sum fixes were this:
>
> Close Messenger. This will simply stop any of your
> contacts getting the virus.
> 2. Goto 'Start' then 'Run' and type 'msconfig'. A new
> window should appear.
> 3. Click on the tab at the top right that says 'Startup'.
> 4. Untick the box next to 'MSN Messenger'.
> 5. Click 'ok' and when it asks if you want to restart your
> computer say no.
> 6. Press 'Ctr' + 'Alt' + 'Del'. Find the file that
> says 'MsgSpread' and click End Task.
>
> The virus has now been deactivated!
>
> To remove it fully follow these instructions:
>
> 1. Goto the Desktop and open My Documents.
> 2. Double click on 'Messenger Service Received Files'. If
> you dont see a folder called that then goto 'My Computer'
> then goto 'C' then 'Program Files' and finally 'Messenger
> Service Received Files'.
> 3. You should now see a file called 'PIC1234(1)(1)(1)(1)(1)
> (1)(1)(1).exe'.
> 4. Click on it ONCE and press 'Delete'. This should delete
> the file.
> 5. Empty your Recylce Bin.
>
> The virus has now been fully removed!
>
>
>
> there is also a removal tool d/l here:
>
> http://www.2-spyware.com/file-pic1234-exe.html
>
> click on download scanner and remover
>
>
>
> sum fixes were this:
>
> 1.go to Run -> regedit
> 2.go to
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersio
> n\Run
> 3.after there, remove "realone_nt2003"
> and "realone_nt2004"
>
> 4.then, go to C:\Windows\System32
> 5.find and remove "MONIKER.EXE", "SYSLRAY.EXE", "HKT1.DLL"
> - (is sys"L"ray, not sys"T"ray, becarefull)
> - (if u cannot remove moniker.exe or syslray.exe, u
> ctrl+alt+del, go to process, u end the process of this
> two)
>
> 6.then uninstall msn messanger
> 7.restart pc
> 8.reinstall msn messanger again
> 9.done
>
>
>

anonymous
Wed Sep 22 00:31:36 CDT 2004

omg thank you for posting i'm so glad i found this! This
is exactly my problem for the last week. And thank you
msn for not getting back to me it has been over a week
since i emailed you for help and no response. I was
online and someone messaged me and there was this blue
link under their message www.xf25.com/msn/wode.jpg and i
though they were sending it to me so i clicked on it. My
computer started making sounds and up came a picture of a
japanese woman and i asked who it was and they didnt know
what i was talking about. He then asked if i was sending
him a link. So at that moment when i clicked on it it
attatched itself to my msn. My friends were telling me
every time i type that link appears at the end of every
message with these little boxes. Very annoying! So i am
scared of my friends getting this so i have not used msn
messenger in over a week which is frustrating. I have
discovered something tho, that i can use windows
messenger and it works fine. Therefore it is my whole msn
messenger program that is affected by this "virus" and
not just my sign in name as i first thought. I have tried
scanning for virus's with 3 different anti virus
software, removed virus's, all adware, and uninstalled
and reinstalled numurous times. What do i do to get my
msn messenger working properly? Can you please help me
thanks!
>-----Original Message-----
>There seems to be alot of ppl getting the picture virus
>through msn messenger. are they accepting a file or wat?
>ppl are saying when the send a message they see japanese
>women and sum txt and it takes them to a website.
>
>I just want to know if msn has informed antivirus
>companies about this problem??????
>
>and wat is the msn team doing to stop this??? maybe u
need
>to email everyone and tell them not to open a particular
>attachment with the file name ???
>
>
>
>sum fixes were this:
>
>Close Messenger. This will simply stop any of your
>contacts getting the virus.
>2. Goto 'Start' then 'Run' and type 'msconfig'. A new
>window should appear.
>3. Click on the tab at the top right that
says 'Startup'.
>4. Untick the box next to 'MSN Messenger'.
>5. Click 'ok' and when it asks if you want to restart
your
>computer say no.
>6. Press 'Ctr' + 'Alt' + 'Del'. Find the file that
>says 'MsgSpread' and click End Task.
>
>The virus has now been deactivated!
>
>To remove it fully follow these instructions:
>
>1. Goto the Desktop and open My Documents.
>2. Double click on 'Messenger Service Received Files'.
If
>you dont see a folder called that then goto 'My
Computer'
>then goto 'C' then 'Program Files' and
finally 'Messenger
>Service Received Files'.
>3. You should now see a file called 'PIC1234(1)(1)(1)(1)
(1)
>(1)(1)(1).exe'.
>4. Click on it ONCE and press 'Delete'. This should
delete
>the file.
>5. Empty your Recylce Bin.
>
>The virus has now been fully removed!
>
>
>
>there is also a removal tool d/l here:
>
>http://www.2-spyware.com/file-pic1234-exe.html
>
>click on download scanner and remover
>
>
>
>sum fixes were this:
>
>1.go to Run -> regedit
>2.go to
>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
io
>n\Run
>3.after there, remove "realone_nt2003"
>and "realone_nt2004"
>
>4.then, go to C:\Windows\System32
>5.find and
remove "MONIKER.EXE", "SYSLRAY.EXE", "HKT1.DLL"
>- (is sys"L"ray, not sys"T"ray, becarefull)
>- (if u cannot remove moniker.exe or syslray.exe, u
>ctrl+alt+del, go to process, u end the process of this
>two)
>
>6.then uninstall msn messanger
>7.restart pc
>8.reinstall msn messanger again
>9.done
>
>
>
>.
>