Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Unknown virus...in my recieved files "PIC1324(1)(1)(4)(2)(1)(1).exe"

Status
Not open for further replies.

Guest_imported

New member
Jan 1, 1970
0
What the heck is this thing? I believe I caught it when I was talking with a friend and a message popped up saying something to the affect of, "hey you want to see my new pic?". And then it asks for you to download the "picture" But I think that it's a virus. I have a file in my recieved files folder called,

PIC1324(1)(1)(4)(2)(1)(1).exe

I believe this is the orgin of the virus but I can't open it because it says it may be corrupted, and I can't delete it because it says that may disk may be write protected. I know that my disk is in fact not write protected. The virus itself does nothing permenant, but it is very annoying. When talking to a person it brings up the emotion symbol of ;) and then repeats it about 20 times. I have been told a couple of ways to delete it and none have worked. Please help! Thanx
 
Solution from MSN service;

To remove this worm, you must:

Terminate the application registered as MsgSprd. Delete infected files. Remove
the registry value that was added by the worm.

To terminate the application:
1. Press Ctrl+Alt+Delete one time.
2. If you are running Windows NT/2000, click Task Manager.
3. In the list box (on the Applications tab if you are running Windows (NT/2000)
select MsgSprd.
4. Click End Task.

To delete infected files:
1. Make sure that you have the most recent virus definitions.
2. Start your AntiVirus, and run a full system scan. Be sure that your AV is configured to scan all files.
3. Delete all files that are detected as W32.Annoying.Worm.

To edit the registry:

CAUTION: We strongly recommend that you back up the system registry before you make any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure that you modify only the keys specified.
1. Click Start, and click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to the following key:
HKEY_LOCAL_MACHINE\Software\MicrosoftWindows\CurrentVersion\Run
4. In the right pane, delete the following value: MSN Messenger %download
location%\PIC1324.exe
5. Click Registry, and then click Exit.

Hope this helps
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top