msn virus

[dazza]

daughter has been on to msn on her laptop and got a virus by running something(why do they always do something you tell them not to?) i tryed to do a go back to a time before in xp now all boots up ok but now the mouse no loonger works is there any thing i can do before doing a full restore as i think she will lose all her cousework? i have done a f8 in to safe mode but when xp log in screen comes on i still cant use the mouse keypad on the laptop.i did try to get norton to delete it before doing a goback but said cant delete trogan

[karlos130]

what virus is it etc.....
where did it come from etc...

is there no way of saving what she needs then do a re install?

[Possy_99]

try plugging in a USB mouse and using some other anti virus rather than Norton.

If push comes to shove and you have to format why not make your daughter her own user account which does not have administrator rights, this will prevent any 'nasties' from doing harm in the future.

[dazza]

http://h**p://tuspics.tu.funpic.org/...hp?pic2038.jpg
says

is this you??? with a face then they tell u 2 go on it

please dont do as she did and go on it if you dont know what you are doing with pcs as she is driving me mad as she cant understand why i cant just press a few buttons and fix it

please help me as now she wants my lap top

[Possy_99]

what's that link meant to be for? I've tried it a couple of times, get what I think is a german site, no pics though and nothing, just get redirected to http://404.funpic.de/403.html

no offence m8, but you really need to give us more to go on if you want to aviod a 'full restore'. You've mentioned a trojan, which is good, but to get rid of it we need to know exactly which trojan it is so we can look for specific removal instructions.

Any descent anti virus program should at least identify the trojan (I wouldn't rate Norton as descent either) if you can give us the name of the trojan it would certainly help. If you want to try an alternative anti virus program, try AVG Free (easily found in google) I've been using it for ages now and it's pretty good.

As a last resort you could also try Hijack This (again, easily found in google) which will scan all the usual places a trojan and similar nasties plant commands to start themselves. You could perform the scan, save the logfile and copy/paste the log back here, then someone here could take a look for anything suspicious and explain how to attempt removal of suspicious items.

[dannyboy]

Possy_99, the link he posted is the link that appears in your MSN messenger convo.

The person says "is this you? :O and then that link", although the link dazza posted is wrong as it as 2 http://s in.

Apparantly when you click the link, its actually a virus, and the link is sent to everyone on your msn list.

Anyway i dont think there's a removal procedure yet, but only done a bit of searching via google. There's been very similar ones in the past but I believe this new one is a different virus. I clicked it like an idiot earlier tonight but firefox just asked if i wanted to save the php file so don't think its done anything to me...

[Possy_99]

ah ha, found some info..

http://forums.spybot.info/showthread.php?p=54747

http://www.anetforums.com/posts.aspx?ThreadIndex=62292

http://forums.hexus.net/showthread.php?t=92314


and my source of course... http://www.google.co.uk/search?num=1...G=Search&meta=

[dazza]

cant do anything as no mouse even when pluging in a usb one, so now going to do a full restore
when starting to do a restore mouse works again
thanks for the help