1 Reply Latest reply on Jul 21, 2010 10:36 AM by Peter M

    Yahoo IM Virus not being detected  "is this you on pic  http://etc. etc."

         I received the following link from a trusted friend on Yahoo IM and clicked on it: is this you on pic Removed for security reasons - Moderator    After clicking on it my system began to act strange.  It began sending the same link to all the contacts in my list on Yahoo IM.  It also attempted to open Windows Live.  It even added another link to the msconfig for Windows Live and marked it to open when the computer starts.  I ran msconfig and marked that Windows Live was not to start (disabled it).  After restarting my computer, it started Windows Live again and when I ran msconfig, again the box was marked to enable the program.  I have scanned my computer four times with McAfee and not once is it showing that there is a virus on my computer.  I am unable to open Yahoo IM without the link being sent out to all my contacts.  Can someone assist me with this probable virus?

       

      NOTE:  Correction made to the link that caused the virus.

       

      NOTE:  Here is another message that is being sent by my Yahoo IM: Removed for security reasons - Moderator http://91.212.226.33/qkl4Cix7f4XUCs8MTQ1fGRvd25sb2FkfA==18k.gif c:\stas.exe 1

      NOTE:  The probable virus is now accessing McAfee program and disabling the Parental Controls of the program.  Waiting on the Free Scan from the Virus Removal site to finish to see if it will detect the virus.

       

      NOTE:  This is what happens reference the probable virus.  When I open Yahoo IM after approximately 5 minutes, all my contacts are selected and the link is sent out to them.  This is all that I have noticed at this time.  As I learn more I will pass on the information.  So far all McAfee virus scans that have been completed have not identified a virus on my system.

       

      NOTE:  FREE Scan has finished and once again nothing detected.  Opened Yahoo IM and once again the message was sent out to all my contacts.  Any suggestions would be appreciated.

       

       

      Message was edited by: Ex_Brit on 21/07/10 11:26:58 EDT AM

       

       

      Message was edited by: Ex_Brit on 21/07/10 11:33:42 EDT AM
        • 1. Re: Yahoo IM Virus not being detected  "is this you on pic  http://etc. etc."
          Peter M

          Follow the required reading here:  http://community.mcafee.com/docs/DOC-1294

           

          If that doesn't help then download, install, update (very important) and run the FREE version of THIS software and let it remove everything it finds.  Reboot if asked to after the scan.

           

          Note: all of the previous line's instructions can be achieved in "Safe Mode with Networking" if for some reason the malware prevents normal mode functions.  You can reach that by tapping F8 repeatedly while booting up and selecting that option from the menu that presents itself.

          (Usually item #2 on that menu).

           

          Meanwhile tell that "friend" that his/hers machine is possibly infected.

           

           

          Message was edited by: Ex_Brit on 21/07/10 11:36:04 EDT AM