MSN Messenger gives virus links to contacts

[imported_Neeraj]

My friend was a victim of the vulnerability in the Windows Grpahics Rendering Engine, where he opened a WMF file he recieved through an MSN Messenger conversation. This was when the patch was not issued.

After thoroughly cleaning up his system, his MSN Messenger account gives links to his contacts 1 by 1 continuously. This link appears to be sending from him, as if he wrote it there, and his contacts click on this link and immedietely are affected if they're not patched.

He has tried reinstalling MSN Messenger 7.5 loads of times but links are still sent out. His PC appears to be clean of viruses and spyware. The link is only sent out sometimes, sometimes not, to all contacts.

Any ideas of how to fix this?

 

[montag451]

1) http://uk.trendmicro-europe.com/consumer/housecall/housecall_launch.php
2) dl, install, update the following:
ADAWARE
SPYBOT search and destroy
Microsoft Antispyware beta
Spysweeper
Kaspersky av

Run them all in SAFE MODE.
All are free for either 30 days, or for ever depending on which one.

 

[imported_Neeraj]

He did all the scans multiple times and thoroughly. His system is fully updated. He also tried loggin into MSN Messenger on 2 seperate Windows installations. His Messenger still gives out this virus link to his contacts one by one.

Does that mean his account has been hijacked remotely so that whenever he's on it, the hijacker tells it to give out links?

 

[mechBgon]

Did he do the scans listed above in Safe Mode? If not, have him try that, and also try using F-Secure Blacklight beta from http://www.f-secure.com/blacklight (use this in normal non-Safe-Mode operation)

Also try this routine here, precisely as directed (including Safe Mode With Command Prompt).

Or there is a great virus removal tool called Windows Setup... :evil: What's a guy's time worth... yeah 😉