PDA

View Full Version : New Trojen



Syntax-Error
01-12-03, 05:34
To all those who use msgplus with msn messenger, be warned the latest version contains a trojen. called Dropper.Swicer.A

the latest version of Free AVG http://www.grisoft.com/us/us_dwnl_free.php

detects but fails to fully remove it may leave one or more files. they will come up with "cannot delete check if disk if full or write protected" thing I did here was renamed the file to h.n closed the folder waited a second re-opened and deleted. this worked for me.


oh and dont belive the bullshit msgplus are trying to use to get out of this. they says its on the "optional" spyware. but since i didnt install any of that crap i think there talking bullshit. i advise you all to stay away from msgplus in the future.


oh and limited info on the virus. going on what i find. the file thats detected isnt the actual virus but is used to drop the virus into the boot sector of your HDD. hence the name dropper :) (guessing swicer is the actual virus)

Marx
01-12-03, 05:41
As long as it doesn't cut into my disney mmo playing time.

if it does, I'll have to bust some skulls.

Well, dream busting skulls.

Naw, not even.

I'll just say I did on an internet forum.

nonamebrandeggs
01-12-03, 05:43
Awwww... that program lets me use /me in MSN =\.

Torteth
01-12-03, 05:55
Is there any official write up of this... I fail to see why Patchou would do such a thing...
Are you POSTIVE that its not just a FALSE POSITIVE..?
Seems VERY strange to me...

Cypher_Psy
01-12-03, 05:58
Ok some quotes coming up...


Messenger Plus! 2.52 Update posted by Patchou on 11/15/2003

Once again, Messenger Plus! has been updated. Version 2.52 includes several important fixes (colors in names are back!), a new feature that should please all of you who are using custom emoticons, and a completely rewritten sponsor acceptance setup screen. In the past months, I received many complains from people who installed the sponsor program by mistake; as I want to keep all my users happy I made it almost impossible to install the sponsor without realizing it. For more information about the new sponsor "security measures" and the other improvements present in this new version, checkout the version history page. I hope you will all enjoy this new release! :)

Basically Messenger plus is NOT infected, it's the POS "sponsor package" they used...

In 2.51 you have to use CUSTOM install to weed it out before you install... The thing can be un-installed, but it's still a nasty piece of crap adware.

As from the quote, they changed it so it should be obvious theres an optional piece of crap they would like you to install but don't have to.

Be careful, stay safe.

Syntax-Error
01-12-03, 13:10
ill say again i did NOT install ANY of the "Optional" crap. just the basics and i STILL got the virus.


Read the comments here.

http://aolca.com.com/3302-2150-10239580.html


And i tell you I DID NOT INSTALL ANYTHING BUT THE BASE PROGRAM

Torteth
01-12-03, 13:21
Well it seems that only AVG is picking up the virus. (According to you + the site you linked to) So I'm still rather skeptical...

http://msgplus.mybboard.com/showthread.php?tid=18804&pid=169983#pid169983

Heh, just as I thought...

Cypher_Psy
01-12-03, 13:29
The wording could do with brushing up, but you CAN carry on with the install after picking I refuse.
Should say I refuse to Install the Sponsor, but carry on.

http://www.psychosisnet.freeserve.co.uk/Mplusshot.jpg