3 replies to this topic

[sweetami]

Hey. I got this worm by clicking a link sent to me via msn messenger. Now when I log into Msn messenger 7.5, it automatically sends all my online contacts a link something like "Is this you?" then a link to what looks like it will be the receiving contact's profile. If they click it, they are automatically infected. I've also noticed some flickering of text boxes since I have become infected. Any advice to how I might exterminate this from my system? thank you!

[Mosaic1]

Post a hijackthis log please. Download and then extract Hijackthis.exe to a new folder. Do not run it from the zip the desktop or a temp folder.

Here's a link:
http://www.merijn.or.../hijackthis.zip

Do not remove anything using HijackThis. Save the log and then copy and paste the contents into your next reply here in this same topic. It lists many types of entries. Some are good, and others need to be removed. We will help you sort it out.


Do not ever click on a link in either a chat program or email even if you think you know who it is from.

[sweetami]

i clicked open and then it popped up with the file then blanked out and im back to where i started.

[Mosaic1]

Run hijackthis again and save the log. Do not open that log.

Upload the log here:
To this forum.
http://www.thespykil...forum/index.php


Press new topic, and give a link to this topic. Let them know I asked for this file.
Press the browse button and then navigate to the hijackthis.log

Press send and the file will be uploaded. I'll have a look and let you know what I see.

Let's see if we can get a silent runners log.

Please download silentrunners.zip
http://www.silentrun...ent Runners.zip

Unzip to your desktop and double click on the VBS file.
If your get a message about a malicious script, please allow the script to run. It is a diagnostic tool.

The script will save a Notepad document to your Desktop.

Copy and paste the contents of that text file into your next reply here.