New Messenger Virus called:" img0012-www.photostorage "

[CharlyDeFrance]

HI people,

While chatting with a friend via Windows Live Messenger v8.1 , i received
from him a message saying:" I uploaded new photos of me, check them here"
with a file called " img0012-www.photostorage.zip " .....since i trust this
friend ,i clicked on the file to open it , SUDDENLY many windows of all my
contacts who are online has been opened automatically, and the same message
above that i received was sent to every contact.

So i quickly closed my messenger by Ctrl+Alt+Del since it wasn't responding,
coz i new that was a Virus, and i can assure u its new since i searched for
it on the net and in all Forums, and nobody talked about it or know anything
about that.

So, i searched for it on my computer, and i found it in Windows directory,so
i deleted it, but it looks it always reappear and causes my Messenger to send
messages with the virus (btw, the messages are not the same always, they
change from contact to contact, like saying "hey, just watch my new photos",
or if u don't check my photos i'll be mad of you" etc etc etc etc ).

So please, did anyone heard about this new virus, coz i really need some
help since i'm unable to Sign in to my messenger coz i'm afraid to spread it
more and more.

P.S: i do have the file as a Zip file in my Windows Directory if someone
specialist wants to check it.

THANKSSSS

 

[Malke]

CharlyDeFrance wrote:
> HI people,
>
> While chatting with a friend via Windows Live Messenger v8.1 , i received
> from him a message saying:" I uploaded new photos of me, check them here"
> with a file called " img0012-www.photostorage.zip " .....since i trust this
> friend ,i clicked on the file to open it , SUDDENLY many windows of all my
> contacts who are online has been opened automatically, and the same message
> above that i received was sent to every contact.
>
> So i quickly closed my messenger by Ctrl+Alt+Del since it wasn't responding,
> coz i new that was a Virus, and i can assure u its new since i searched for
> it on the net and in all Forums, and nobody talked about it or know anything
> about that.
>
> So, i searched for it on my computer, and i found it in Windows directory,so
> i deleted it, but it looks it always reappear and causes my Messenger to send
> messages with the virus (btw, the messages are not the same always, they
> change from contact to contact, like saying "hey, just watch my new photos",
> or if u don't check my photos i'll be mad of you" etc etc etc etc ).
>
> So please, did anyone heard about this new virus, coz i really need some
> help since i'm unable to Sign in to my messenger coz i'm afraid to spread it
> more and more.
>
> P.S: i do have the file as a Zip file in my Windows Directory if someone
> specialist wants to check it.

You can send the file to Virus Total for identification.

http://www.virustotal.com/

There are quite a few viruses spread by instant messaging programs. What
antivirus do you have installed? In addition to sending the file to
Virus Total, in the meantime you can try scanning with David Lipman's
Multi_AV. Follow instructions to do all scans in Safe Mode. Please see
the special Notes regarding using Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

The download is hosted on a German site but the application is English
and the instructions included are in English.

Let us know what Virus Total reports.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

 

[CharlyDeFrance]

ok Malke, I'm using AVAST antivirus.
i sent the file to VirusTotal, they analyse it, and it seems that my Avast
Antivirus is between those who can't identify the new virus called:"
img0012-www.photostorage " coz only some antiviruses are able to detect
it.....this is the Virustotal result:

File IMG-0012.zip received on 09.14.2007 11:53:50 (CET)
Current status:finished
Result: 24/32 (75%)

So i think i'm gonna use AVG antivirus for that....Thanks Malke

"Malke" wrote:

>
> You can send the file to Virus Total for identification.
>
> http://www.virustotal.com/
>
> There are quite a few viruses spread by instant messaging programs. What
> antivirus do you have installed? In addition to sending the file to
> Virus Total, in the meantime you can try scanning with David Lipman's
> Multi_AV. Follow instructions to do all scans in Safe Mode. Please see
> the special Notes regarding using Multi_AV in Vista.
>
> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
> http://pcdid.com/Multi_AV.htm - download
>
> The download is hosted on a German site but the application is English
> and the instructions included are in English.
>
> Let us know what Virus Total reports.
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

 

[Milo \(MSPSS\)]

As an advice and preventive measure please dont click on anything esp links
given off by you friends off the Instant Messenger we have seen same
instance as yahoo messenger few months ago - better yet verify first with
your friends whom you are chatting with if they indeed sent off this link to
you.

General instance of this concern is you friends instant messenger was
compromised and is sending out involuntarily the link to everyone in their
address list once they are online.

For further inquiry and assistance - call 866 727 2338 ( Microsoft
Security ) US/CANADA

"CharlyDeFrance" <CharlyDeFrance@discussions.microsoft.com> wrote in message
news:80143805-4285-4483-839F-57356F154805@microsoft.com...
> HI people,
>
> While chatting with a friend via Windows Live Messenger v8.1 , i received
> from him a message saying:" I uploaded new photos of me, check them here"
> with a file called " img0012-www.photostorage.zip " .....since i trust
> this
> friend ,i clicked on the file to open it , SUDDENLY many windows of all my
> contacts who are online has been opened automatically, and the same
> message
> above that i received was sent to every contact.
>
> So i quickly closed my messenger by Ctrl+Alt+Del since it wasn't
> responding,
> coz i new that was a Virus, and i can assure u its new since i searched
> for
> it on the net and in all Forums, and nobody talked about it or know
> anything
> about that.
>
> So, i searched for it on my computer, and i found it in Windows
> directory,so
> i deleted it, but it looks it always reappear and causes my Messenger to
> send
> messages with the virus (btw, the messages are not the same always, they
> change from contact to contact, like saying "hey, just watch my new
> photos",
> or if u don't check my photos i'll be mad of you" etc etc etc etc ).
>
> So please, did anyone heard about this new virus, coz i really need some
> help since i'm unable to Sign in to my messenger coz i'm afraid to spread
> it
> more and more.
>
> P.S: i do have the file as a Zip file in my Windows Directory if someone
> specialist wants to check it.
>
> THANKSSSS

 

[E.R.INC.Tracy1]

"CharlyDeFrance" wrote:

> HI people,
>
> While chatting with a friend via Windows Live Messenger v8.1 , i received
> from him a message saying:" I uploaded new photos of me, check them here"
> with a file called " img0012-www.photostorage.zip " .....since i trust this
> friend ,i clicked on the file to open it , SUDDENLY many windows of all my
> contacts who are online has been opened automatically, and the same message
> above that i received was sent to every contact.
>
> So i quickly closed my messenger by Ctrl+Alt+Del since it wasn't responding,
> coz i new that was a Virus, and i can assure u its new since i searched for
> it on the net and in all Forums, and nobody talked about it or know anything
> about that.
>
> So, i searched for it on my computer, and i found it in Windows directory,so
> i deleted it, but it looks it always reappear and causes my Messenger to send
> messages with the virus (btw, the messages are not the same always, they
> change from contact to contact, like saying "hey, just watch my new photos",
> or if u don't check my photos i'll be mad of you" etc etc etc etc ).
>
> So please, did anyone heard about this new virus, coz i really need some
> help since i'm unable to Sign in to my messenger coz i'm afraid to spread it
> more and more.
>
> P.S: i do have the file as a Zip file in my Windows Directory if someone
> specialist wants to check it.
>
> THANKSSSS