my girlfriend accidentally clicked a link on aim when because her touchpad freaked out...

now i need some insight and opinions on how to get rid of this this....

the virus is supposedly W32.Spyware.Worm

now i disabled the service that it was using (msnins.exe) from opening using MSconfig, but i'm looking for ideas with what to do with said msnins.exe

the question is, is this a compromised file or a completely new file that was created by the virus?

IE should i worry about replacing it after i delete it?

IBformatc:/s/u

 

There is an MSN messanger file with the same name, but that is easily replaced. It's either related to the worm, or created by it. Delete it, look for a remover, etc.

Did you check in Regedit: hkey_local_machine and users: software\microsoft\windows\currentversion\run


Delete in there, and in msconfig as you said. Do this in safe mode if your having no luck. Scan computer in safe mode.

 

Yeah that bitch is a killer, i had that and did what the post above said, i think its gone now

 

http://free.grisoft.com/softw/70free...ee_430a828.exe

 

maybe.

maybe.

if messenger throws a fit after deleting it, then reinstall messenger. otherwise, dont worry about it.

 

nothing registers the virus... i tried everything i could get my hands on, that was the first one I tried...

the only thing that shows theres a problem is when the host file opens itself at boot norton goes crazy.