IPB

Welcome Guest ( Log In | Register )

10 Pages V   1 2 3 > »   
Reply to this topicStart new topic
> Messenger Virus Information
Stigmata
post Jan 20 2005, 07:39 AM
Post #1


Mess.betterthanyours
Group Icon

Group: Supervisor
Posts: 1,951
Joined: 5-September 04
From: Uk
Member No.: 79



Current Names List:
sexy_bedroom.pif
love_me.pif
see_me.pif
Drunk_lol.pif
piccie_lol.pif
webcam_015.pif


What Does Pif Stand For?
Windows Program Information File

A Program Information File dates back to the early versions of Windows. Basically, it's an information file that when you click on it the information in the file is used by Windows to run some program; including code that can be in the PIF file. It is a potentially dangerous file type and one should never click on one received via E-mail without extensive knowledge of exactly what it will do first. Note: This file type can become infected and should be carefully scanned if someone sends you a file with this extension.

How Can I Protect Myself?
the ovious answer would be to have a updated antivirus
if you do not have one. you can download avg antivirus free here
or use the free online scanner from panda here

Another way you could stop it happening would be to to use Messenger Plus AutoAccept feature, but configurating it to not accept files
this can be done by
-Signing in
- Going to the plus menu, then preferences
- Clicking on instant messages
- By then clicking on the top check box
- and changing the convo box to accept everything but files.


(warning this leaves you open to automaticly accept any other file)

UPDATE:
QUOTE(Front Page)
Based on numerous reports from messers, a new virus seems to be propagating itself rapidly through MSN Messenger.

F-Secure identifies the worm as Bropia.A, other antivirus software (like including Kaspersky) labels it IM-Worm.Win32.VB.a.

When received and executed by the victim, the worm places itself in the C directory with a random filename like:

sexy_bedroom.pif
drunk_lol.pif
naked_party.pif
webcam_(random number).pif
love_me.pif and similar looking names.

It then automatically sends itself to active MSN Messenger contacts. It also drops and executes oms.exe, a variant of Rbot, which copies itself as lexplore.exe and adds two registry keys so it will be executed at next system startup. The bot can be used as a backdoor, logging keystrokes, relaying spam and for various other purposes and is therefor a huge security threat to your system. Brobia.A can also disable mouse right button and manipulate Windows mixer volume settings.

user posted image

If you receive a file transfer request for such a file, press ALT-D or click Decline. Don't ever execute the file. If you did, delete the file immediately and permanently from your system (My Received Files and C drive) and take necessary security measures. For more information, visit F-Secure.
Go to the top of the page
 
+Quote Post
Shoop
post Jan 20 2005, 09:18 AM
Post #2


Mess.bedlam
*********

Group: *Valued Members
Posts: 1,435
Joined: 1-October 04
Member No.: 755



Kool it's pinned! This is pretty helpful. I can imagine many people thinking .PIF is an image. I agree, get AVG people msn_tongue.gif Thanks Stigmata.
Go to the top of the page
 
+Quote Post
Mordeaci
post Jan 20 2005, 02:28 PM
Post #3


Mess.beagle
***

Group: Members
Posts: 172
Joined: 20-November 04
Member No.: 2,927



some one tryed to send me love me pif i exited the converstation when the person did after i exited i was thinking was it a virus?
Go to the top of the page
 
+Quote Post
Monkey
post Jan 20 2005, 02:34 PM
Post #4


Mess.beachtowel
******

Group: *Valued Members
Posts: 735
Joined: 11-September 04
From: The Netherlands
Member No.: 104



What does it do then? msn_rolleyes.gif
Go to the top of the page
 
+Quote Post
Mordeaci
post Jan 20 2005, 02:35 PM
Post #5


Mess.beagle
***

Group: Members
Posts: 172
Joined: 20-November 04
Member No.: 2,927



QUOTE(Monkey @ Jan 20 2005, 06:34 AM)
What does it do then? msn_rolleyes.gif
[right][snapback]32462[/snapback][/right]

i dident accept it i just left the converstation
Go to the top of the page
 
+Quote Post
rllrhockey8
post Jan 23 2005, 08:37 PM
Post #6


Mess.bean
*

Group: Members
Posts: 3
Joined: 23-January 05
Member No.: 4,827



i have another one for you it is
funny.exe i got it the other day once it was sent to u it sends it to al the people you are talking to
Go to the top of the page
 
+Quote Post
WarOnErrorism
post Jan 24 2005, 06:19 AM
Post #7


Mess.beanie
*

Group: Members
Posts: 14
Joined: 30-November 04
Member No.: 3,244



Isn't that a different one though? Because I know a number of my contacts have had a smiley thingy virus, where it will just randomly say something about getting free smileys. Posted a thread on it awhile ago, can't remember.

Anywho, I think those two are associated.

EDIT: Never mind, I read another thread and it said that the smiley one was associated with some other sort of adware. Somehow, even though my friends ran ad-aware and never downloaded any of that crap...

This post has been edited by WarOnErrorism: Jan 24 2005, 06:35 AM
Go to the top of the page
 
+Quote Post
Kangie
post Jan 24 2005, 04:32 PM
Post #8


grr...
********

Group: Members
Posts: 1,022
Joined: 3-September 04
From: Scotland
Member No.: 35



waronerrorism: sounds like smiley central msn_happy.gif
Go to the top of the page
 
+Quote Post
hmaster
post Jan 24 2005, 04:41 PM
Post #9


Mess.beanbagfoo
Group Icon

Group: *Valued Members
Posts: 4,733
Joined: 27-September 04
From: UK
Member No.: 237



dyou mean buddy icons?
it says

"Your buddy has a new Buddy Icon. Take a look! http://buddies.funbuddyicons.com/?ZRxdm352YYGB
noreply.gif[fwpscript]Icon:none@[/fwpscript]"

sumat like that, wen the people havnt done nothing ?

This post has been edited by hmaster5: Jan 24 2005, 04:42 PM
Go to the top of the page
 
+Quote Post
Kangie
post Jan 24 2005, 04:44 PM
Post #10


grr...
********

Group: Members
Posts: 1,022
Joined: 3-September 04
From: Scotland
Member No.: 35



isnt that smiley central too? that damn thing gets everywhere msn_sad.gif
Go to the top of the page
 
+Quote Post
hmaster
post Jan 24 2005, 04:47 PM
Post #11


Mess.beanbagfoo
Group Icon

Group: *Valued Members
Posts: 4,733
Joined: 27-September 04
From: UK
Member No.: 237



lol i know, i keep asking my friends and there like,
"i never done nothing, bla bla bla"

but im suer its just part of smiley central and only those people with it can view it msn_confused.gif
Go to the top of the page
 
+Quote Post
Mordeaci
post Jan 24 2005, 06:09 PM
Post #12


Mess.beagle
***

Group: Members
Posts: 172
Joined: 20-November 04
Member No.: 2,927



QUOTE(hmaster5 @ Jan 24 2005, 08:47 AM)
lol i know, i keep asking my friends and there like,
"i never done nothing, bla bla bla"

but im suer its just part of smiley central and only those people with it can view it msn_confused.gif
[right][snapback]33929[/snapback][/right]

fun buddy icons sucks
Reason because when you set one as your dp it will show the animated icon but the other person in the converstaion will just see a pic that says fun buddy icons
Go to the top of the page
 
+Quote Post
Coast
post Jan 25 2005, 08:36 PM
Post #13


Mess.bedbug
*

Group: Members
Posts: 32
Joined: 10-October 04
Member No.: 1,425



New one "me_2005" do not accept it!! trust me do not accpect it my friend tried sending it kinda funny really, she didn't say hi but just tried to send me me_2005.pif god its all happing on msn 7 for me lol, what this one does is, it gets in some of ur files and it goes online (signs onto msn without you knowing) and it trys sending the file to someone else *your still have it so dont think you wont have it no more* it messes up windows and also gives you spyware but no worry about that, the virus is what you want to get rid of first, the longer its in the more it will send the file

Coast

This post has been edited by Coast: Jan 25 2005, 08:55 PM
Go to the top of the page
 
+Quote Post
dread
post Jan 25 2005, 10:22 PM
Post #14


Mess.bedbug
*

Group: Members
Posts: 42
Joined: 25-January 05
Member No.: 4,907



Is naked_drunk.pif and me_2005.pif the same virus or a variant?
Go to the top of the page
 
+Quote Post
Mordeaci
post Jan 25 2005, 10:46 PM
Post #15


Mess.beagle
***

Group: Members
Posts: 172
Joined: 20-November 04
Member No.: 2,927



mind if i post some hot mail viruses? there from 2003 but they still might be here!
your_details.pif
thank_you.pif
movie0045.pif
document_Fall.pif,
application.pif
ful story is Here
Go to the top of the page
 
+Quote Post
*Nat*
post Jan 26 2005, 07:16 PM
Post #16


Mess.beyondanyhealthnorms
Group Icon

Group: Admin
Posts: 3,059
Joined: 3-October 04
Member No.: 870



Erm I just got the webcam one, accepted it without thinking and then when it said ms dos I realised so I've deleted it out of my rec eived files, and i have no idea where to look adn what to look for on the c drive, im now scanning my computer but it hasnt picked anythign up yet.

Virus scan complete - no infection found. I'm worried, surely it should've found soemthing or did I delete it in time?


Merged By Stigmata
Go to the top of the page
 
+Quote Post
Stigmata
post Jan 26 2005, 09:56 PM
Post #17


Mess.betterthanyours
Group Icon

Group: Supervisor
Posts: 1,951
Joined: 5-September 04
From: Uk
Member No.: 79



QUOTE(dread @ Jan 25 2005, 10:22 PM)
Is naked_drunk.pif and me_2005.pif the same virus or a variant?
[right][snapback]34435[/snapback][/right]


same virus im guessing msn_happy.gif

QUOTE(natalzimayzi @ Jan 26 2005, 07:16 PM)
Erm I just got the webcam one, accepted it without thinking and then when it said ms dos I realised so I've deleted it out of my rec eived files, and i have no idea where to look adn what to look for on the c drive, im now scanning my computer but it hasnt picked anythign up yet.

Virus scan complete - no infection found. I'm worried, surely it should've found soemthing or did I delete it in time?
[right][snapback]34636[/snapback][/right]


well, you could ask your contacts if u have sent them anything.. also, is ur virus database updated, this is a new virus msn_happy.gif
Go to the top of the page
 
+Quote Post
TheBlasphemer
post Jan 26 2005, 10:04 PM
Post #18


Mess.beagle
Group Icon

Group: VIP
Posts: 194
Joined: 4-September 04
Member No.: 63



Please note that accepting this file does no harm to your computer yet,
it only harms your computer when you start the file (eg, doubleclick it)
if you have just accepted it, or it got auto-accepted, just deleting it from your received files is enough (although even that's not necesarry!)
Go to the top of the page
 
+Quote Post
doggie
post Jan 27 2005, 02:22 PM
Post #19


Shame on the ignorant
********

Group: Banned
Posts: 1,220
Joined: 6-October 04
From: Australia
Member No.: 1,062



Funny, this virus is for the dumb and stupid, and the irony of it being started in canada
Go to the top of the page
 
+Quote Post
*Nat*
post Jan 27 2005, 04:12 PM
Post #20


Mess.beyondanyhealthnorms
Group Icon

Group: Admin
Posts: 3,059
Joined: 3-October 04
Member No.: 870



QUOTE(Stigmata @ Jan 26 2005, 09:56 PM)
same virus im guessing msn_happy.gif
well, you could ask your contacts if u have sent them anything.. also, is ur virus database updated, this is a new virus msn_happy.gif
[right][snapback]34692[/snapback][/right]



QUOTE(TheBlasphemer @ Jan 26 2005, 10:04 PM)
Please note that accepting this file does no harm to your computer yet,
it only harms your computer when you start the file (eg, doubleclick it)
if you have just accepted it, or it got auto-accepted, just deleting it from your received files is enough (although even that's not necesarry!)
[right][snapback]34694[/snapback][/right]



That's good then, I'm scanning my computer now though anyway and it's clear. I have Nortan Anti Virus 2003 which does live updates continuously and it has just done one so yes it's up to date.
Go to the top of the page
 
+Quote Post

10 Pages V   1 2 3 > » 
Reply to this topicStart new topic

 



RSS Lo-Fi Version Time is now: 26th May 2018 - 07:45 PM
2004-2008 Seb Skuse, mess.be.
MessForum v6.1.4 - created for, and for use only by mess.be.