Yahoo Messenger Virus

Help, while talking to someone on Yahoo Messenger they sent me a link to which I opened (foolish me) while now it keeps popping up when I'm talking to other people...I have ran all the virus scan and spybot scan and just about every other scan and don't know how to get rid of it...Can anyone help? Spy bot & Mcaffee 8.0...no viruses were dedected...

 

Hey an_eeyore, Welcome to Wilders!

Just a quick question,
Can you be more specific as to what you have scanned with and any/all results that you have?

That would help us all to point you in the right direction

 

I used spybot, spyware remover, bitdefender, maccaffee8.0. I don't know what else to use..thanks for all ur help.
Anne

 

Can u post a screenshot of the popup?


snowbound

 

the link is /[COLOR="Blue"]removed[/COLOR] and [COLOR="Blue"]Removed[/COLOR]...they pop up in messenger when ever they want to. thanks for any help, Anne

Please don't post links to malware or possible malware. Ron

 

Whoa, i just clicked on your links and got this from NOD32,

Edit- removed my screenshot as it showed malware link.


snowbound

 

Sounds like you either want to obtain a trial version of NOD32, or do a HijackThis post to one of the boards that analyse them.

Also there are other online scanners out there, including Kaspersky, Trend Micro, and Ewido (I think they've got one now)

Other free Anti-spywares include Microsoft AntiSpyware, Ad-Aware SE, and Spyware Doctor (sometimes you have to search for their free version)

 

Try these:

Anti-Spyware Tools:

• Spybot S&D
• Ad-Aware
• SpywareBlaster
• Microsoft Anti-Spyware Beta (2000/XP Only)

Anti-Trojan Tools:

• Ewido Security Suite
• A2 Anti-Trojan

Online Scanners:

• Bitdefender
• Kaspersky

 

Is there anyway to get back my yahoo id? Because after that ym message I could not access the yahoo id i had before

 

If you have Windows XP and have a restore point from before the 11th Oct do a restore to a time when your pc was trouble free. If not maybe you will have to re register with Yahoo.

 

Restoring wont do a thing...he will have to go through Yahoo support to try to get his account back

 

The idea is to restore his PC to a time when there was no virus present, and then go to yahoo to retrieve his account.

 

using avast antivirus it is finding a virus in windows directory.

 

from this yahoo messanger virus system restore point is also affected. use avast antivirus to get rid of that one

 

There is an exploit in lots of versions of Yahoo messenger that alloowes remote code execution or loading of programs on your pc . . it uses the "avatar" or "display pictures" feature. My suggestiopn would be format your pc, or uninstalll yahoo completely and delete the directory, then use another version of yahoo messenger and / or just simply disable that function in the settings as i have

 

I also would suggest not to use messangers like MSN, Yahoo, etc. If you don'y need video/voice suuport switch to alternatives like Miranda, Gaim. etc. They are less vulnerable and whats more important mostly 'Open Source'.

 

i personally dont like third party since they are not part of the original, and when msn or yahoo changes, you have to wait for an update

 

got the same problem too.
what happen is when i open my YM! there are offline messages giving links.
someone said that if you click on the links, they will get your username/ID and password and they might change it.

as of now the trojan is called ByteVerify and the only thing to get rid of it is to reformat the PC! >.<

 

I'm very sorry, but I consider that to be a bit overeacting.
There are lots of ways to get rid of ByteVerify and the worms that spread using Yahoo Messenger.
But staying away from the offline messages is a good tip!!

 

Well, i have to agree with what he said about "over reacting".

Trust me, there's always a way to remove things, unless theyre Auto-Reformatters... But anyways,
All you need to do is perhaps do a search on your system, go advanced, and then change it to "Search for files created within" whenever the time period is you were infected...

Try using Hijack This, and posting somewhere where they will analyze them for you. But not here please.

Also, again, try using some trusted programs that someone else already had mentioned, and be sure to update any security patches.

You may want to consider looking for a vulnerability patch from Microsoft?

Anyways, Good luck,
And feel free to email me if you need any further assistance =D

 

Why not to try SuperAntispyware free and AVG antispyware free version.
Also scan with AVS( Kaspersky).
One of my co-worker got IM worm( Qcan) and it was detected by SAS and AVG antipspyware( including Kaspersky and Antivir). I cleaned that PC.

 

MSAS has been discontinued. U mean Windows Defender.

 

How to do that?
Thanks.

 

there is one trojan which sends this link to all the messeneg contacts and then collects the passwords .

 

OP, your virus match the description I've made HERE ??
If so, disable svchost from startup and do a scan with NOD32. It will fix it.