MSn virus

[SkylineMaster]

this is something that is called Block Checker once u download it and u try to click to some1 it send a msg to him or she saying that u have that and to make them download it the page is block-checker.com dont go there and download.
i would like to know if i can like warm this page or something cuz it might harming lots of computers with that spam. can any1 say something about it?
Some1 say is not a virus and the page has information about it but i can tell that that is not the right way to advertise thier program.

Uninstall

Download the file attached and read instructions.

After doing that go Program Files and delete its Folder

[MentaL]

[Jhewt]

i download it, it's a fuking keylogger, but i change my password ;p

[exclamatio]

seen lots of ppl on my list with it

very annoying

[Morphix]

My friends don't seem to be retarded enuf to download it, gg guys!

[Blaminator]

whoever cicks it is a retard.

[SkylineMaster]

i know first i had it then i removed booting in safe mode.

[Spark]

when i first saw it i thought my gf was tellin me to d/l it :-/ wat a fking idiot i am SHE DOESNT USE CAPITALS AND PUNCTUATION!!! T.T i just restarted my comp after uninstalling it went to the folder and shoved it in the recycle bin and deleted it whoo me 1-0 to block checker YESS

[Becky]

oh god, I got the h4x~ :( :p

[Hydra]

I've spoken to a few people on MSN who have a stupid msg popping up "KNOW WHO's BLOCKED YOU etc...". Never been stupid enough to download it myself.

[Steely]

i got sent that. wasnt gunna click it was i lol the cunts

was jay who sent me it bowes call him a minge

[Silveron]

if someone has blocked you, why would you wanna know?
you're not going well obviously

[SkylineMaster]

if any1 of u guys have it ill give u something to remove it.

[Dandune]

Yes they infect you then tell you download yet another program to remove it... Riight *rolls eyes*

[siliconshadow]

blockcheckremove.reg containing >

Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BlockChecker"=-
[KEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BlockChecker"=-

Run that after removing form memory to removed from run.

[Jack]

hahaha to whoever got fooled :P~

[SkylineMaster]

hahaha to whoever got fooled :P~

u could have got too ^_^

[rage_man]

hmm lets process that site ;p

[Obbob]

How to Remove the MSN Messenger Virus
cute.pif - W32.Kelvir.A

Once again another MSN Messenger Virus is spreading around the Internet. This time the virus sends the following message to all your contacts:

omg this is funny!
[Followed by a link to download the cute.pif from jose.rivera4.home.att.net]

The user then downloads the file which sends the link to all of their contacts and then downloads a W32.Spybot worm onto the infected machine.

If your are lucky enough the program will just run on your machine, send to your contacts and end without downloading the Worm as it did on the machines we tested cute.pif on.

The first thing you should do therefore is delete the downloaded cute.pif making sure you do not run it again! Then check to see if a Worm has been downloaded as well.

1. Press Ctrl+Alt+Delete and look for hotkeysvc. If it's there select it and press "End Task".
2. Use the Windows Find feature to look for a file called "hotkeysvc.exe". Which if their should be in the %System% directroy. If you find the file delete it.
3. Goto 'Start' then 'Run' and type 'msconfig'. A new window should appear.
4. Click on the tab at the top right that says 'Startup'.
5. Look for, and if it exists, unitick the box next to "hotkeysvc.exe" or simlar name.

The http://jose.rivera4.home.att.net/cute.pif has now been fully removed!

As you may have passed the MSN Messenger virus on to some of your contacts we suggests you warn your friends about the MSN Messenger Virus

In future if someone tries to send you a file on MSN Messenger and it ends with '.exe' or '.pif'. Dont download it unless you are really sure you know what it is. Ask the person that is sending you it what it is!

[Obbob]

How to Remove the MSN Messenger Virus
PIC1234(1)(1)(1)(1)(1).exe

To remove the virus is simple to do. Simply follow these instructions:

1. Close Messenger. This will simply stop any of your contacts getting the virus.
2. Goto 'Start' then 'Run' and type 'msconfig'. A new window should appear.
3. Click on the tab at the top right that says 'Startup'.
4. Untick the box next to 'MSN Messenger'.
5. Click 'ok' and when it asks if you want to restart your computer say no.
6. Press 'Ctr' + 'Alt' + 'Del'. Find the file that says 'MsgSpread' and click End Task.

The virus has now been deactivated!

To remove it fully follow these instructions:

1. Goto the Desktop and open My Documents.
2. Double click on 'Messenger Service Received Files'. If you dont see a folder called that then goto 'My Computer' then goto 'C' then 'Program Files' and finally 'Messenger Service Received Files'.
3. You should now see a file called 'PIC1234(1)(1)(1)(1)(1)(1)(1)(1).exe'.
4. Click on it ONCE and press 'Delete'. This should delete the file.
5. Empty your Recylce Bin.

The virus has now been fully removed!

As you may have passed the MSN Messenger virus on to some of your contacts we suggests you warn your friends about the MSN Messenger Virus

In future if someone tries to send you a file on MSN Messenger and it ends with '.exe'. Dont download it unless you are really sure you know what it is. Ask the person that is sending you it what it is!

[Obbob]

How to Remove the MSN Messenger Virus
Choke.exe aka I-Worm.Choke

Even if the user accepts the download he or she will not be infected. The user must download and run the files they received. The file name can differ every time. It can be 'ShootPresidentBUSH.exe', 'Choke.exe' or '%The user name%.exe' where the user name is a nickname from dalist.txt.

To remove the virus is simple to do. Simply follow these instructions:

1. Press Ctrl+Alt+Delete and select Choke.exe, and press "End Task".
2. Close Messenger. This will simply stop any of your contacts getting the virus.
3. Goto 'Start' then 'Run' and type 'msconfig'. A new window should appear.
4. Click on the tab at the top right that says 'Startup'.
5. Unitick the box next to "Choke.exe" or simlar name.

The virus has now been deactivated!

To remove it fully follow these instructions:

1. Goto 'Start', then 'Find' and search for "Choke.exe".
2. Click on the file and press 'Delete'.
3. Empty your recycle bin.

The virus has now been fully removed!

As you may have passed the MSN Messenger virus on to some of your contacts we suggests you warn your friends about the MSN Messenger Virus

In future if someone tries to send you a file on MSN Messenger and it ends with '.exe'. Dont download it unless you are really sure you know what it is. Ask the person that is sending you it what it is!

[Obbob]

How to Remove the MSN Messenger Virus
W32.Aplore@mm

W32.Aplore@mm is a MSN Messenger Virus which spreads by sending links to an infected web page. When a user is infected with this virus they send a message do their online contacts. The message may be as follows where ZZZ is the contacts name, the A's repersent an IP address and the B's repersent a port number.

ZZZ says:
this is cool, http://AAA.AAA.AA.AA:BBBB

OR
ZZZ says:
btw, download this, http://AA.AA.AAA.AAA:BBBB

To remove the virus is simple to do. Simply follow these instructions:

1. Close Messenger. This will simply stop any more of your contacts getting the virus.
2. Goto 'Start' then 'Run' and type 'msconfig'. A new window should appear.
3. Click on the tab at the top right that says 'Startup'.
4. Unitick the box next to "Explorer".
5. Restart you Computer.

The virus has now been deactivated!

As you may have passed the MSN Messenger virus on to some of your contacts we suggests you warn your friends about the MSN Messenger Virus

In future if someone tries to send you a file on MSN Messenger and it ends with '.exe'. Dont download it unless you are really sure you know what it is. Ask the person that is sending you it what it is!