http://www.dslreports.com/forum/r22641059 en Wed, 25 Nov 2009 18:07:52 EDT Wed, 25 Nov 2009 18:07:52 EDT http://www.dslreports.com/forum/remark,22645128 SnowyOne : All that would remove is messenger.
The best advice I can give is to suggest going through the steps detailed here.
»Security Cleanup]]> http://www.dslreports.com/forum/remark,22645128 Thu, 02 Jul 2009 13:22:16 EDT http://www.dslreports.com/forum/remark,22644825 mrchris : I don't know if him removing and reinstalling Messenger would remove the presence of it.]]> http://www.dslreports.com/forum/remark,22644825 Thu, 02 Jul 2009 12:23:34 EDT http://www.dslreports.com/forum/remark,22641507 mrchris : So there is a removal program for this I take it? I must show my buddy ASAP.

Edit: I think he got rid of it now.]]> http://www.dslreports.com/forum/remark,22641507 Wed, 01 Jul 2009 18:54:54 EDT http://www.dslreports.com/forum/remark,22641383 SnowyOne : * Summary of the findings:
What's been found:
Communication with a remote IRC server.
Creates a startup registry entry.
Contains characteristics of an identified security risk.

»www.threatexpert.com/report.aspx···55115224]]> http://www.dslreports.com/forum/remark,22641383 Wed, 01 Jul 2009 18:28:35 EDT http://www.dslreports.com/forum/remark,22641059 mrchris : I am friends with someone in South America and I got a weird message from him not long ago..looks like one of those new IM spam link things..the message is:

" qe t parecen mis fotos ht tp://barfod.no/image/index.php??img=2584 (H) en la 4ta foto sales tu :D "

The download prompt was img####.exe which I cancelled and I did some googling, which came up with no relevant results. Could this be a new spim hijacking program? Any help would be appreciated. :)]]> http://www.dslreports.com/forum/remark,22641059 Wed, 01 Jul 2009 17:32:39 EDT