MSN virus removal tool

• ndmmxiaomayi

  12 Aug 07, 13:34

  Finally, after some digging I found that bloody tool. Now translated properly already. It was actually released quite a while ago... I asked for help for translating... but nobody replies...
  
  http://www.forospyware.com/Msncleaner/MsnCleaner.zip
  
  Do not click on the link. It brings you directly to their forums. Right click on the link and select Save Link As (Firefox and other browsers users) or Save Target As (IE and IE-based browsers users)
  
  Save it, extract the files and use it.
  
  Best to use it in Safe Mode.
  
  One side effect, it sets the homepage to the removal tool's homepage (www.forospyware.com). Just reset your homepage after it's done.
  
  Edit: Added usage instructions.
  
  Here's how to use it:
  
  

  [*]Download MsnCleaner.zip from Forospyware.
  Note: Do not click on the link; please right click on the link and select Save Link As or Save Target As.
  [*]Save this file to your desktop or a folder.
  [*]Extract this file by doing the following:
  
  [*]Locate the MsnCleaner.zip that you've downloaded earlier.
  [*]Right click on MsnCleaner.zip and select Extract All....
  [*]Click Next on seeing the Welcome to the Compressed (zipped) Folders Extraction Wizard.
  [*]Click on the Browse button. Click on Desktop. Then click OK.
  [*]Click Next. It will start extracting.
  [*]Once done, uncheck (untick) the Show extracted files box.
  [*]Restart your computer in Safe Mode.
  
  [*]When you see BIOS screen, start pressing F8.
  [*]A boot menu will appear shortly.
  [*]Using the up down arrows, select Safe Mode and press the Enter key.
  [*]Windows will now load.
  [*]Log in to your usual account.
  [*]Double click on MsnCleaner.exe to run it.
  [*]Click on the Analyze button. It will start searching for infected files.
  [*]If there are no infected files, click on the Exit button.
  [*]If there are infected files, click on the Delete button.
  [*]When it's done, restart your computer back to Normal Mode.
  [*]Please post this log file: C:\MsnCleaner.txt
• ndmmxiaomayi

  12 Aug 07, 13:48

  Current version is 1.2.0. If anybody by chance download from ulu servers, please remove your copy and download the latest version or you may still find that the MSN virus is still there.
• Twincat

  12 Aug 07, 13:54

  thanks alot...
• ndmmxiaomayi

  12 Aug 07, 14:24

  As per usual... those who start a new thread without reading will have your thread locked...
• MyPillowTalks

  12 Aug 07, 19:20

  i tot i helped mayi translate before?
  
  but dunno why it turns out to be pillow language
• ndmmxiaomayi

  12 Aug 07, 19:38

  You don't expect an ant to understand a pillow.
• Darkness_hacker99

  12 Aug 07, 19:39

  Originally posted by MyPillowTalks:

  i tot i helped mayi translate before?
  
  but dunno why it turns out to be pillow language

  
  
  

  Originally posted by ndmmxiaomayi:

  You don't expect an ant to understand a pillow.

  
• venny

  12 Aug 07, 21:06

  wow, thx for the tool find. till nw i've been manually seeking out all the malicious files by eye from my com...
• 105090

  12 Aug 07, 21:15

  are machines infected when other contacts suddenly "sends" something and the user go accept?
  
  like those pictures? is that the virus in tis topic?
• ndmmxiaomayi

  12 Aug 07, 22:18

  Originally posted by 105090:

  are machines infected when other contacts suddenly "sends" something and the user go accept?
  
  like those pictures? is that the virus in tis topic?

  1. If your friend sends you, you don't accept - not infected.
  
  2. If your friend sends you, you accept but never open the file - may or may not be infected.
  
  3. If your friend sends you, you accept and open the file - chances are you are infected.
  
  The virus is not posted in this topic. However, a few others including me have started topics about MSN virus before.
• ord personnel

  14 Aug 07, 23:54

  Are we talking about removing W32.Mimbot.A virus discovered 9 August 2007 by Symantec? Or any MSN virus?
  
  Name of Attachment (MSN): PictureAlbum2007.zip
  
  http://www.symantec.com/security_response/writeup.jsp?docid=2007-081000-2334-99
• ndmmxiaomayi

  14 Aug 07, 23:59

  Originally posted by ord personnel:

  Are we talking about removing W32.Mimbot.A virus discovered 9 August 2007 by Symantec? Or any MSN virus?
  
  Name of Attachment (MSN): PictureAlbum2007.zip
  
  http://www.symantec.com/security_response/writeup.jsp?docid=2007-081000-2334-99

  Only those that are sending zipped files. There's another kind of MSN virus spreading, known as Chod, but it won't be provided here. They require special care in handling as it involves some system files.
  
  The MSN Cleaner changelog can be found here: http://forospyware.com/Msncleaner/
• darkfuryex

  23 Aug 07, 17:16

  mayi cannot dl leh..how?
  
  i mean can dl but the dl not even real -_-"
• Lin Yu

  23 Aug 07, 17:18

  another beneficaries of mayi's hardwork
• hisoka

  23 Aug 07, 17:20

  how to know if i need it?
• darkfuryex

  23 Aug 07, 17:21

  Originally posted by hisoka:

  how to know if i need it?

  change ur msn nick and ask people if u have been sending ur frens naked pic
• venny

  23 Aug 07, 17:41

  i've also seen it recently. a new variation i guess. the file it attempts to send is called.
  myphotos2007.zip
  jus take note.
  a temp relief to stop ur frens frm getting infected by u is to search for that file in ur com and delete them all.
• ndmmxiaomayi

  23 Aug 07, 17:47

  Originally posted by darkfuryex:

  mayi cannot dl leh..how?
  
  i mean can dl but the dl not even real -_-"

  Can download but not real?
• ndmmxiaomayi

  23 Aug 07, 17:48

  Originally posted by hisoka:

  how to know if i need it?

  If your friend keeps asking you why you keep sending them zip files... then you know liao.
• ndmmxiaomayi

  23 Aug 07, 17:49

  Originally posted by venny:

  i've also seen it recently. a new variation i guess. the file it attempts to send is called.
  myphotos2007.zip
  jus take note.
  a temp relief to stop ur frens frm getting infected by u is to search for that file in ur com and delete them all.

  Looks like this one will infect immediately on accepting the file.
• hisoka

  23 Aug 07, 17:50

  Originally posted by ndmmxiaomayi:

  If your friend keeps asking you why you keep sending them zip files... then you know liao.

  hmmz i tiok the myphoto2007.zip wor. but my antivirus cuaght it. but dunno if its really clean leh
• venny

  23 Aug 07, 17:53

  one way to tell if u need it. set ur msn to save conversations. review ur conversations occasionally. u might notice some messages and files that u dont rmb ever sending.
  this way, u can keep track of those u have infected and tell them of the removal procedures. (and this thread...)
• leehexin

  24 Aug 07, 22:44

  is this a new msn virus? file so big n my contact keep sending me this and got disconnected after sending?
  
  http://img250.imageshack.us/img250/315/untitledst6.jpg
• ndmmxiaomayi

  25 Aug 07, 01:24

  I'm not sure, but it's like almost 10 times larger than the files I'm seeing. Still, the pattern is there. Don't accept it.
• venny

  27 Aug 07, 21:11

  im recently seeing another variant. filename is MyGallery5156
  
  anyone seen it yet? got a fix for this one? appears the current version of msncleaner cant remove this one.