Just MSN Live # 2

Posted on June 4, 2008
Filed Under Computer, Internet, tips & triks | Leave a Comment Visited 1765 Times |

Just in the first post I had mentioned to MSN Live installation errors caused by the thousand and one bug / wpa that this software has a nice and heavy.

Today I find myself cursing because my friends still use MSN Live and continue to infect the great!

Everything begins when you get a sentence like:
And 'your picture? hxxp: / / myspace.jojing.info / myspace.php? = a @ bc
There are many variations to the phrases, including variations on domain names, such as youtube.com.

In my case I downloaded a file like this: www.myspace.com image_134453_9198.jpg -
The numbers are definitely variable but the extension. Com is fixed, need to make the file executable so that it is "installed".

Opening that file will have a nice and accurate infection. Many antivirus: AVG, Avast, Norton, Kaspersky and company did not detect it. NOD32 correctly detect the virus and is the only one who seems to be able to do decently well online: www.eset.com / onlinescan. HijackThis detects even anything special (at least not immediately after infection)!

Unfortunately NOD32 online has enabled the removal, we must make do by hand.

The name of the file installed is fixed (or at least should in these variants of the virus): wksvcsc.exe

CTRL + ALT + DEL and end the process wksvcsc.exe
Eliminate c: \ windows \ wksvcsc.exe
Eliminate c: \ windows \ prefetch \ * wksvcsc
Start -> Run -> "regedit" -> delete the key Computer / HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows / CurrentVersion / Run / Windows UDP Control Service: wksvcsc.exe

But the solution there 'and personally I feel even better than amsn! Pidgin