Help w/Msn worm???

sidefx

OSNN Addict
Joined
8 Jan 2004
Messages
103
My girlfriend's parents just got infected with one of the Bropia worms I think.

However, when they try to open NAV or when I tried sending them the removal tool from Symantec it shuts down as soon as they try opening it.

What is the problem, how can I get their pc fixed?
 
try safe mode or safe mode with networking if you need a connection
 
Try running Stinger as I have used that before when a virus is shutting down the Antivirus application.
 
REMOVE the open hole which is a gaping security risk! AKA MSN ! It is embedded in OS and so if you do not extract it it give nasty hooks to any infection - /me hates it!
 
Mainframeguy said:
REMOVE the open hole which is a gaping security risk! AKA MSN ! It is embedded in OS and so if you do not extract it it give nasty hooks to any infection - /me hates it!
Why not just inform them that accepting and running unknown files is generally a bad idea? This golden rule will not only prevent future infections through MSNM, but will help to keep them safe from email worms and other malware as well.

Traffic accidents happen all the time. Do you tell your friends and relatives to scrap their cars and stop driving? No, you tell them to wear their seatbelts and to drive safely...
 
See if an online AV will work .. something like housecall. Then tell them not to click on IM links from strangers. :)
 
As seen in the comments section of the front page news item for these worms... anyone know if users of trillian/miranda are safe from this?
We use MSN Messenger here at home, the gf and kid prefer it but I use Miranda, since news of these worms I renamed the msn messenger.exe so they can't use it (even though they know not to open links etc... but accidents will happen and they have a tonne of 'newbie' friends on their list). I've got them pi**ed at me now for disabling MSN messenger and setup Trillian for them since it does muli-user accounts with ease.
 
Does the worm copy itself?

Can it not be deleted by manual deletion or does it need a removal tool such as the one offered through Symantec?

Does the worm shut down AV amongst other programs? If so, can getting to an online virus scanner through IE be a problem?

They are illiterate when it comes to pc's however they are learning. Unfortunately this worm was received from a friend which was also unaware.

Apparently, they're saying it has many copies of itself, like you know how when you make copies of a file it says "Copy of..." something. To me, they are accidently copying the file if I am wrong please correct me.
 

Members online

No members online now.

Latest profile posts

Also Hi EP and people. I found this place again while looking through a oooollllllldddd backup. I have filled over 10TB and was looking at my collection of antiques. Any bids on the 500Mhz Win 95 fix?
Any of the SP crew still out there?
Xie wrote on Electronic Punk's profile.
Impressed you have kept this alive this long EP! So many sites have come and gone. :(

Just did some crude math and I apparently joined almost 18yrs ago, how is that possible???
hello peeps... is been some time since i last came here.
Electronic Punk wrote on Sazar's profile.
Rest in peace my friend, been trying to find you and finally did in the worst way imaginable.

Forum statistics

Threads
62,015
Messages
673,494
Members
5,621
Latest member
naeemsafi
Back