msn messenger worm threat

[kronas]

a new worm is spreading via instant messaging service msn messenger

Jitux.A is a worm which is spread by clicking on a url sent via a message, by clicking on the link, a file is downloaded called jituxramon.exe and stays in the pc's memory it will automactically send the message every 5 mins to everyone on your contacts list


http://www.pcworld.com/news/article/...87,pg,1,00.asp

[Terminal]

Originally Posted by kronas

a new worm is spreading via instant messaging service msn messenger
Jitux.A is a worm which is spread by clicking on a url sent via a message, by clicking on the link, a file is downloaded called jituxramon.exe and stays in the pc's memory it will automactically send the message every 5 mins to everyone on your contacts list
http://www.pcworld.com/news/article/...87,pg,1,00.asp

Nice one!
Discovered last week and known also as Win32/HLLW.Retgeek.

Kudos for the heads up, kronas

[Marge]

Info about this also on the ntlworld website and links too

[luftys]

Originally Posted by kronas

a new worm is spreading via instant messaging service msn messenger

Jitux.A is a worm which is spread by clicking on a url sent via a message, by clicking on the link, a file is downloaded called jituxramon.exe and stays in the pc's memory it will automactically send the message every 5 mins to everyone on your contacts list


http://www.pcworld.com/news/article/...87,pg,1,00.asp

Thanks Kronas have told the kids not to open anything they dont know

[kronas]

no problem i just like to keep people on there guard, as the viruses and worms come through

[Shaun]

I'm not following you around K honest! Do you know what the command is to remove version 4.7 of Messenger from XP?? I cant find a link anywhere!

[kronas]

Originally Posted by dellwear

I'm not following you around K honest! Do you know what the command is to remove version 4.7 of Messenger from XP?? I cant find a link anywhere!

all i did was go to the 'run' box type 'msconfig' disabled 'msnmsgr' or something like that from the 'startup' tab, and i got it to completely remove, make sure you use the uninstaller first in add/remove if its there (its been a while since i have done it)

then just delete the folder in program files.

anymore problems post back

[Shaun]

Cheers K, couldn't find the option in msconfig so went googleing and found the command I was looking for:

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove


all that nastiness gone for good.

[M35A2C]

Is this what the email from ntl is about ?

Is it safe to download & install the patch quoted on the microsoft website ? Or did I receive one of these hoax emails ?

[albone]

yep I was just looking as I too have received that email too! It appears that anyone useing xp or 2000 are at risk. ms ref: 'MS03-043 Buffer overrun in messenger service could allow code execution (828035)' this from tec-help on ms web site. Links given by email from ntl.