MSN virus?

Discussion in 'Malware Help (A Specialist Will Reply)' started by dyamond, Feb 14, 2008.

  1. dyamond

    dyamond Imelda Marcos of Majorgeeks

    I wasnt really sure where this should go, so feel free to move it if necessary.

    A friend contacted me recently because he picked up the IS THIS YOU? virus by clicking on the link that popped up on his MSN messenger. He asked me what should he do? Since he lives a great deal away from me I gave him the link to the Read and Run, asked him to follow all the instructions and told him to post the logs here when he is done.

    About 2 days later called me and said after he followed my instructions (which Im not sure that he did them right or even at all, considering that he didn’t post the logs here) but that after he did them, his laptop became basically inoperable. He told me when he clicks on start, the menu pops up but its completely blank. Also, he said when he clicks to open IE (or any other program on the desktop), it wont open instead it freezes the laptop and all he can do is turn it off.

    I was going to help him run the whole process over again over the phone (because Im sure he still has that virus) but since he told me that he cant access anything, seems kind of pointless. He threatened to come down here and beat me up if I don’t fix it (trust me he really will :D) so I need your help. My question is there anything that can be done considering that his laptop is kind of useless now? Any thoughts?

    Thanks!
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Assuming he is running Win XP since you did not say:

    See if he can run System Restore to restore to a point before running the READ ME. Even bringing make malware is preferable to the current state. Then we can try to work with him more slowly. It is possible that he did other things on his own. (You should find out exactly what he did and did not do as far as the steps in the READ ME go.) If he can boot in normal mode and open Task Manager. If so, click File, New Task (Run...) and enter C:\WINDOWS\SYSTEM32\Restore\rstrui.exe and click okay to bring up System Restore. See if an old restore point can be used.

    Otherwise, see if he can boot in safe mode?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds