MSN Virus --- SX members infected

[Joe]

Ok i got a link from SX members on MSN saying

is this you and giving a link

DONT CLICK its a virus/trojan ...

if u do then go to Control - ALT and DElete .. processes and end sp2patch.exe

then delete it reboot and ya should be fine

also i noted the msconfig file has a new entry (use in safe mode) for csrss but the location is set to startup i unclicked it>> time to migrate to serv2003 (yes i do hava license)

 

[Eguy]

-

 

[NickS]

-

 

[NickS]

Joe, while AVG Free is scanning, I searched quickly for sp2patch.exe, found, and deleted it.

I hope my OS is ok :S.

Thnx again man you rock, 6 Reps for you .

 

[Eguy]

-

 

[NickS]

"Who ever did it, go to hell and be ashamed of yourself"

Sorry, I take that personally as I'm prolly the only one on SX who clicked it.

Why? That's the second time I got sent the link today, so, I was curious..cuz it had my email address in it.

 

[Eguy]

-

 

[NickS]

Well eguy I have some important data & apps on my machine...and I wldnt like to lose them.

I'm quite stressed now, but I think i fixed it.

I deleted the prefetch to SP2patch.exe AND sp2patch.exe and AVG scanned clear...so, the moment of truth, I restart again.

MEMBERS, if you get another message from me with that dmaned link, DO NOT CLICK IT PLZ.

My apologies eguy.

 

[FragTek]

Ok both of you shut your traps right now....

Nick and Eguy, I demand that you both edit your posts flaming each other or even referencing each other. In fact, just delete the posts that don't even pertain to the thread so that I don't have to.

You two should both know better than this... You're both skating on thin ice.

 

[NickS]

How do I remove this?

I've tried Norton, AVG both in safemode, ALONG with MS AntiSpyware.

I'm installing Kaspersky as we speak. Does anyone know what the Virus is called?

 

[Eguy]

bitdefender is the best one, kaspersky should get it

 

[PV5150]

I personally use NOD32, imho it's the most effective. I had these msn's from NickS and Ionicle So don't accept anything from them until you're sure that they are clean, guys please check your systems again.

 

[NickS]

Clean mate, Clean.

Fixed it.

THANK YOU NORTON YOU ROCK!!!!

Follow the directions below.

http://securityresponse.symantec.com/avcenter/venc/data/w32.chod@mm.html

It's called CHOD.A or something.

Also you need Norton AntiVirus 2005 Trial...after using the trial I got the real ver today.

Nice upgrade from my 2003.

 

[balilu]

alot of you guys got infected. i recieved the message from about 7 SX Members. Anyway i never get infected by this kinda stuff im just to intelligent . I simply avoid them i recieve alot of this kinda messages from my 130contacts on msn

 

[NickS]

The directions on how to remove it is above .

 

[Eguy]

I love Opera

 

[limqareb]

yes i had got it fron jnewwel it gives your email adrrees in a profile of vbulletin

 

[NickS]

he sed Avast! removed it for him fine.

 

[FragTek]

NOD32 always catches this junkola for me

 

[Dav0s]

NOD32 always catches this junkola for me

yup the ever faithful NOD shall save me