To all msn messenger user, plz take note that there is a new virus in the net.
A new MSN virus has started spreading recently, it sends itself to MSN contacts as IMG-0012.zip. Like other variants, it sends sham messages to contacts.
In IMG-0012.zip, there is img0012-www.photostorage.com included, the file size is 25,600 bytes, Kaspersky detects it as Backdoor.Win32.SdBot.bxr, and Worm.MSN.Win32.PhotoCheat.f by Rising Antivirus, Win32.Hack.SdBot.bx.25600 by Kingsoft Antivirus.
Sends messages:QuotationCheck out my nice photo album. 😀
wanna see the pics from my vacation? :>
Nice new photos of me and my friends and stuff and when i was young lol…
lol remember when you used to have your hair like this
My friend took nice photos of me.
you Should see em loL!
hey i’m going to add this picture of us to my weblog
Here are my private pictures for you
sorry to those who got the msg from me and accept it
HOW TO REMOVE
Delete registry entry:(“Start” menu -> “Run”, type “REGEDIT”.)
“Windows Lsass Services”=”%Windows%\system\lsass.exe”
Delete virus files: (the lsass.exe is marked as hidden and as a system file under properties.)
Remove “Windows Sharing” from exceptions tab of Windows Firewall
Set registry data:
if u do not understand go to this website http://www.cisrt.org/enblog/read.php?162&part=2