"Hey is that you?" MSN Virus :evil:

[ColdInsomnia]

Right, so now I've got a goddamned virus.

Mcafee is detecting nothing. I know that the .exe it's running in is csrss.exe, which is in my system32 folder. I've tried deleting it in command prompt using the /f command, no luck. Just says access is denied.

I've tried booting in safe mode and deleting it, no luck. Same problem.

I've tried using Unlocker to delete it, no luck.

So, Mcafee finds nothing, I cannot delete this file myself, and it keeps messaging people in my MSN attempting to spread the virus with a stupid message asking about if someone is in a picture.

It's a backdoor trojan. Mcafee seems to be working alright so I'm kinda praying that no wanker can get into my system right now, but since Mcafee is finding no problems with my system I can't be sure.

How can I get rid of the damned thing? Google produces no answers (that work).
____________________
Yamaha YB100 | Yamaha TZR125 | Yamaha XJ600S | Suzuki GSF600
"Our society is run by insane people for insane objectives. I think we're being run by maniacs for maniacal ends and I think I'm liable to be put away as insane for expressing that. That's what's insane about it."
John Lennon

[Paddy Blake]

Check the properties and see if it is read only.See if you can change to
read write.Then try delete it again.
Worth a try.

Paddy.

[ColdInsomnia]

[Paddy Blake]

If it is not read only then edit it and delete the text.
Check what is running in task manager some times you can get rid of this
and an other program will put it back there again.So it may be more than
just that file.

Paddy.

[ColdInsomnia]

[Paddy Blake]

Did you check what else is running because there is some other program
fixing and replacing this file.

Paddy.

[Paddy Blake]

What if you edit it and then tag it as read only.

Paddy.

[california_rookie]

What OS are you using? Maybe someone can donate their own non-infected file for you to replace it with?
____________________
https://www.bikepics.com/members/californiarookie/04gsxr600/
https://www.myspace.com/spapadillion
https://steamcommunity.com/id/spapadillion

[Paddy Blake]

It seems to be a windows file so you cant delete it.
https://support.microsoft.com/kb/555021#top

Paddy.

[ColdInsomnia]

I'm using Windows XP...

I'm not certain that the crssr.exe is the infected file, it's just what I read from a virus info page that described the exact symptoms of what I've been having.

I'm totally out of ideas of how to get rid of it.

Thanks for all the help so far though....
____________________
Yamaha YB100 | Yamaha TZR125 | Yamaha XJ600S | Suzuki GSF600
"Our society is run by insane people for insane objectives. I think we're being run by maniacs for maniacal ends and I think I'm liable to be put away as insane for expressing that. That's what's insane about it."
John Lennon

[phantomtek]

Restart in safe mode and run the virus scan that way. Theres also an MSN cleaning program that is fairly good. My mate just got this virus and can't get rid of it, so shes having to reformat.

Try a system restore too.

[lllN30lll]

it's McAfee, nuff said.

best thing to do is copy and paste exactly what it says in MSN "is this you" etc. then google it. you'll find the removal instructions then.
____________________
Turbo R1
CRF450R

[ColdInsomnia]

I've already tried a scan in safe mode, as well as googling the exact text that the virus uses. There are removal instructions, but none using Mcafee, they're all using Symantics (or something like that)...

I seem to be getting away with it at the moment, because I'm using Windows Messenger instead of Windows Live! Messenger.

Not an ideal fix obviously, but hey, if it works...
____________________
Yamaha YB100 | Yamaha TZR125 | Yamaha XJ600S | Suzuki GSF600
"Our society is run by insane people for insane objectives. I think we're being run by maniacs for maniacal ends and I think I'm liable to be put away as insane for expressing that. That's what's insane about it."
John Lennon

[Jaloopa]

Try AVG. It's free, so not a major problem if it doesn't work. Also get ad aware and run a full scan.
____________________
mattsprattuk wrote: but at least the lifan could do like 104mph in 3rd gear

[lukamon]

1. do that thing where you deleted the file again

2. click start > run. type MSCONFIG click run

3. go to STARTUP tab

4.uncheck everything you dont recognise (i.e. leave mcaffe on)

5. click ok and restart.
____________________
killa wrote: Im an ass man myself

[_Will_]

Try deleting everything to do with Live! messenger then re-installing it?

Oh, Zonealarm pro - a decent bit of kit
____________________
Past -Honda qr50 | 2004 Peugeot Tkr s 50| | 1996 Yamaha XJ600s Diversion|

[JonB]

I was under the impression you had to be a complete NOOOOOOOB to get an MSN virus.
____________________
Be careful whose advice you buy, but, be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than it?s worth.

[ColdInsomnia]