MSN - Virus

[Brad]

I was using MSN the other night when I got a strange message, Ive looked up about it and go the following from WIKI which describes what happened, does anyone know how to fix this problem and remove the virus is there a fix somewhere????

Malware
MSN Messenger (along with other networks such as its successor Windows Live Messenger, Yahoo! Messenger and AOL Instant Messenger) is often used as a conduit or "vector" for delivering malicious software such as spyware, viruses, worms, and trojans to unsuspecting computer users. The two methods used by hackers to deliver malware over the IM vector are (1) sending a file transfer with a virus-infected file, and (2) delivering a message with socially engineered content containing a web address (URL) containing active malicious code. Viruses and worms with colorful names such as W32.Yalove or Troj/Msnfake-L have been identified as targeting users of the MSN Messenger network over the past few years.

The threat of infection by these two methods is substantial and growing. The IM Security Center, a collaboration between security companies and corporations, has tracked attacks over IM since 2003 and shows well over 1000 distinct attacks over the public IM networks. The first half of 2007 saw an 84% increase in IM attacks over the first half of 2006. While IM-specific attacks remain a small percentage of overall virus and malware threats, the continued growth in usage of IM, along with the rapid adoption of IM in the workplace (See Instant Messaging) make IM an attractive vector for malicious hackers, and both individuals and companies must take precautions to avoid infection.

The most common method of delivering a malicious payload is the use of social engineering to construct a message that appears to be coming from a contact on the recipient's contact list. A socially engineered message is one that is written in a friendly, informal manner, that could easily be mistaken as coming from a friend. The message usually will say something like "Click here to see pics of me from vacation!" or "Is this you?" with a web address -- known as a "poison URL" -- for the recipient to click. Upon clicking the web address, the recipient is connected to a website containing active content, which is immediately downloaded to the recipient's computer. In most cases, the payload contains an installer, a number of hidden files containing text, and code which causes the same socially engineered message with poison URL to be sent to every contact on the contact list. When the message is sent to all contacts, the cycle starts again, as each contact believes they are receiving a message from a trusted friend. In this manner, IM-borne malware is capable of propagating very rapidly through company and external networks.

Worms and viruses are discovered on a regular basis by security companies, particularly by the three companies with IM-specific security products, Akonix Systems, FaceTime Communications, and Symantec. According to IM security researchers at Akonix and other security firms, the average number of new threats identified each month is 30 to 35, with a high of 88 in October, 2006.

[Psyber]

Fundamental Rules:
1. Don't use Internet Explorer or Outlook/Outlook Express.
2. Never go to an MSN site.
3. Avoid Real Player if you can.

These are all sources of malware.

Advice:
1. Use Firefox/Thunderbird or Opera
2. Use free downloadable software like:
- ZoneAlarm firewall
- Antispyware products like Spybot, AdAware 2007, AVG Antispyware, ENCO Malware Destroyer - these are what you need to download and run NOW.
- Free Antvirus options like AVG Antivirus, Avira, Avast, Comodo Antivirus - a beta not yet in full release, are all useful.

The antivirus programmes will all update themselves. So will Spybot, and ZoneAlarm, but you have to manually update the others.

MSN Messenger, Windows Live Messenger, Yahoo! Messenger, and AOL Instant Messenger, I avoid for the same reason - they are vectors for malware.

[Brad]

Thnks for that I'll remove Messenger form the computer, and run some of the scan programs and see if I can rid the computer.

[Psyber]

Look at the security utilities ion theis site http://www.grc.com/default.htm
"Shoot the Messenger" is one of them.