Warning to MSN messenger users

dplax · 03-06-2005, 06:00 PM

Don't click any links with .pif files. Deathkiller and Bozos of Bones sent me messages, which were exactly the same and proposed for me to open a .pif file on the net. Bozos and DK had not sent me these files so it must be some new virus or something similar trying to spread.

[ 03-06-2005, 06:02 PM: Message edited by: dplax ]

Harkoliar · 03-06-2005, 06:05 PM

yep hive gave it to me.. good think he gave me a "scream" about virus

and told me not to open it just when i was about to. [img]tongue.gif[/img]

dont accept any .pif files guys
its a bloody virus

/)eathKiller · 03-06-2005, 06:14 PM

I JUST GOT IT!

i figured out how the virus works!

it customizes your HOT KEYS

and makes every key stroke do 999 things including forwarding everyone on MSN links to the virus!

the fastest way to stop it is with the official microsoft anti-virus program on www.microsoft.com I have the virus on my computer but i've killed it dead and it's not able to do anything.

my suggestion is just avoid all PIF files.

/)eathKiller · 03-06-2005, 06:17 PM

I think that if you have other messenger services it may use them too.

it also makes itself a STARTUP file

So be carefull!

RoSs_bg2_rox · 03-06-2005, 06:22 PM

When I got back from work I had 10 convos with it, and another 3 later on. Never clicked it though. Quite funny how many people have been infected.

Bozos of Bones · 03-06-2005, 06:50 PM

OK, I just ended the "cute" process tree, deleted the proggy an that's it. I restarted, and nothing happened, it's not up... The thing is "cutely" designed, and thought up. Still a malware, but every once in a while I find a virus/trojan/etc. that's just well-made, well enough to get through my protections. This thing is NOT detected by anything, I scanned it with AVG and avast!(both updated today) and came out negative. TAKE CARE ALL!

Hivetyrant · 03-06-2005, 07:05 PM

Yeah, I got it from Bozos, but I deleted it and formatted just incase [img]tongue.gif[/img]
I doubt it does anything serious, probably just gets a bit of info and does something with it, along with messing up your hot keys...

shamrock_uk · 03-06-2005, 07:16 PM

I reported the prat to his ISP this afternoon - he was even using his personal webspace

He'll get a shock on Monday morning... [img]graemlins/hehe.gif[/img]

A link to removal instructions can be found here: http://www.seamoor.force9.co.uk/guid...html#messenger

My understanding was that rather than messing with hotkeys it scanned your contact list for status changes...certainly that's what older variants did.

[ 03-06-2005, 07:18 PM: Message edited by: shamrock_uk ]

Ivelliis · 03-07-2005, 12:27 PM

There is another virus going around that sends files without your knowledge. Something about "Kerry and a chicken", "sexy girl" etc.

A lot of people have, annoying when you think someone is saying something and it pops up "Blah is sending you this file"

Beaumanoir · 03-07-2005, 01:53 PM

I'm getting alot of these offered. Anyone silly enough to click on them deserves them! They shouldn't be clicking links called 'sexy girl' anyway... tsk. [img]tongue.gif[/img]

03-06-2005, 06:00 PM	#1
dplax Jack Burton Join Date: July 19, 2003 Location: an expat living in France Age: 38 Posts: 5,577	Don't click any links with .pif files. Deathkiller and Bozos of Bones sent me messages, which were exactly the same and proposed for me to open a .pif file on the net. Bozos and DK had not sent me these files so it must be some new virus or something similar trying to spread. [ 03-06-2005, 06:02 PM: Message edited by: dplax ] __________________

03-06-2005, 06:05 PM	#2
Harkoliar Jack Burton Join Date: March 21, 2001 Location: Philippines, but now Harbor City Sydney Age: 41 Posts: 5,556	yep hive gave it to me.. good think he gave me a "scream" about virus and told me not to open it just when i was about to. [img]tongue.gif[/img] dont accept any .pif files guys its a bloody virus __________________ Catch me if you can..

03-06-2005, 06:14 PM	#3
/)eathKiller Dracolisk Join Date: January 5, 2002 Location: Guantanamo Bay, Cuba Age: 38 Posts: 6,043	I JUST GOT IT! i figured out how the virus works! it customizes your HOT KEYS and makes every key stroke do 999 things including forwarding everyone on MSN links to the virus! the fastest way to stop it is with the official microsoft anti-virus program on www.microsoft.com I have the virus on my computer but i've killed it dead and it's not able to do anything. my suggestion is just avoid all PIF files. __________________ [img]\"http://membres.lycos.fr/th8or/ZeroSigForIronworks.gif\" alt=\" - \" /> o.o;

03-06-2005, 06:17 PM	#4
/)eathKiller Dracolisk Join Date: January 5, 2002 Location: Guantanamo Bay, Cuba Age: 38 Posts: 6,043	I think that if you have other messenger services it may use them too. it also makes itself a STARTUP file So be carefull! __________________ [img]\"http://membres.lycos.fr/th8or/ZeroSigForIronworks.gif\" alt=\" - \" /> o.o;

03-06-2005, 06:22 PM	#5
RoSs_bg2_rox Zartan Join Date: May 20, 2003 Location: Near Aberdeen, Scotland Age: 34 Posts: 5,225	When I got back from work I had 10 convos with it, and another 3 later on. Never clicked it though. Quite funny how many people have been infected. __________________ [img]\"http://img.ranchoweb.com/images/ladyzekke/dragonwater2.gif\" alt=\" - \" />

03-06-2005, 06:50 PM	#6
Bozos of Bones Apophis Join Date: July 29, 2003 Location: The Underdark cavern of Zagreb Age: 37 Posts: 4,679	OK, I just ended the "cute" process tree, deleted the proggy an that's it. I restarted, and nothing happened, it's not up... The thing is "cutely" designed, and thought up. Still a malware, but every once in a while I find a virus/trojan/etc. that's just well-made, well enough to get through my protections. This thing is NOT detected by anything, I scanned it with AVG and avast!(both updated today) and came out negative. TAKE CARE ALL! __________________ MAKE LOVE, NOT SPAM!

03-06-2005, 07:05 PM	#7
Hivetyrant Jack Burton Join Date: August 24, 2002 Location: Aussie now in the US of A! Age: 37 Posts: 5,403	Yeah, I got it from Bozos, but I deleted it and formatted just incase [img]tongue.gif[/img] I doubt it does anything serious, probably just gets a bit of info and does something with it, along with messing up your hot keys...

03-06-2005, 07:16 PM	#8
shamrock_uk Dracolich Join Date: January 24, 2004 Location: UK Age: 41 Posts: 3,092	I reported the prat to his ISP this afternoon - he was even using his personal webspace He'll get a shock on Monday morning... [img]graemlins/hehe.gif[/img] A link to removal instructions can be found here: http://www.seamoor.force9.co.uk/guid...html#messenger My understanding was that rather than messing with hotkeys it scanned your contact list for status changes...certainly that's what older variants did. [ 03-06-2005, 07:18 PM: Message edited by: shamrock_uk ]

03-07-2005, 12:27 PM	#9
Ivelliis Gold Dragon Join Date: August 6, 2004 Location: North East England Age: 34 Posts: 2,561	There is another virus going around that sends files without your knowledge. Something about "Kerry and a chicken", "sexy girl" etc. A lot of people have, annoying when you think someone is saying something and it pops up "Blah is sending you this file" __________________

03-07-2005, 01:53 PM	#10
Beaumanoir Iron Throne Cult Join Date: June 3, 2001 Location: There is no IRL, Only AFK. Age: 35 Posts: 4,896	I'm getting alot of these offered. Anyone silly enough to click on them deserves them! They shouldn't be clicking links called 'sexy girl' anyway... tsk. [img]tongue.gif[/img] __________________ My pokemon bring all the boys to the yard, and they're like; you wanna trade cards? Damn right, I wanna trade cards, I'll trade this but not my Charizard.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Heads up Yahoo Messenger users	shamrock_uk	General Discussion	0	05-22-2006 11:26 AM
Heads up MSN Messenger users - worm about	shamrock_uk	General Discussion	15	02-02-2005 11:01 AM
Warning. Bin Laden threatens Internet users.	Dreamer128	General Conversation Archives (11/2000 - 01/2005)	2	07-24-2004 12:35 PM
warning for MSN users and all others!!!!	Stormymystic	General Conversation Archives (11/2000 - 01/2005)	3	05-20-2003 04:54 PM
WARNING TO WIN2000 USERS: TOWN BUGS	Archimedes	Wizards & Warriors Archives	8	11-25-2000 05:21 AM