27
Nov
2007

Annoying MSN Virus pics10 zip

A friend of mine recently got an MSN virus called pics10, basically it gets your msn to message friends on your contact list and then send them out the pics10.zip file, inside the zip file is an executable which I assume contains the virus.

Because of the method of distribution you may think your receiving a something genuine from a friend when in fact your not.

The MSN message may also appear like ahahah, and then send the file separately.

I advised My friend that apparently Microsoft’s OneCare is supposed to rid your system of it, but it seems not to work as expected, because the virus would appear again on my friends computer after rebooting it.

My friend Vaughan informs me this is how he got rid of the pesky thing, so I hope it helps someone else out there but please note playing with ‘regedit’ could further damage your computer if your unsure of how to edit the registry.

His Messages:

Onecare live detects it and quarantines it but it didn’t stop it coming back after rebooting.

If u have any friends who get it, here’s how i did it.

Install MS onecare (yes i know yadda yadda). quarantine it, then in your firewall, block port 6700 TCP (that prevents it contacting IRC, i monitored my firewall log). uninstall windows/msn messenger. download the latest messenger (again). do a search for pics10.zip on your hard drive (i found it in c:/windows & c:/windows/system32) delete any instances of it.

Open regedit & then search for any references to pics10.zip (use the find feature in the edit tab) delete any keys found. then install your new messenger. & reboot.

Do another scan & search your hard drive to make sure the b*****d hasn’t slipped through.

It seems that no other virus protector currently detects or removes this virus except Microsoft’s OneCare, hmmm me smells a fish. Here’s the web address for OneCare:

http://onecare.live.com

Also read that url out loud does it not sound more like wanker.live.com lol does to me.

So it seems in this case Microslow can assist………………..

Leave a Reply