msnmsgrs.exe - Dangerous
msnmsgrs.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
The email subject, message body, and attachment are variable.
Name of attachment: Varies with .bat, .com, .pif, .scr, or .zip file extension.
Copies to shared file folders of various peer-to-peer filesharing applications and instant messaging programs.
Display a message box with the following text: "File Corrupted replace this!!"
Deletes the following values: "Taskmon"; "Explorer"; "KasperskyAv"; "system."
from the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Deletes the following value: "system."
from the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Deletes the following key:
HKEY_CLASSES_ROOT\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32
Manual removal:
Navigate to the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and delete the value: "MsnMsgr" = "%Windir%\MsnMsgrs.exe"