These days a combination of MySpace and IM clients are on the loose where it sends links to pictures with a text which says “I am going to post this on myspace soon” and this makes it all the more intruguing to click on the link and visit the photo. But once you click on the link, a virus is dropped on your computer and it creates a process called “service.exe” which is similar to the Windows system process called services.exe.

Be aware of these types of MSN viruses on the loose to keep yourself a safer and productive online life

* Remove EVERY MSN torjan virus worm to date
* Generically remove MSN virus worms hiding in specific places
* Click and it shall fix. Bwahahahaha.

To remove, PIC1234(1)(1)(1)(1)(1)(1)(1)(1).exe msn virus. Do the steps given below.

1. Close MSN Messenger
2. Goto ‘Start> Run’ [type] “msconfig”
3. Click the tab at the top right hand corner of the window that pop up that says “Startup”
4. Uncheck the box next to “MSN Messenger”.
5. Hit Ok, when it asks if you want to restart your computer say “no”.
6. Hit Ctr, Alt, Del find “MsgSpread” and click End Task (if the file is there).
7. Open My Documents
8. Double click “Messenger Service Received Files” if you dont see a folder called that then go to My Computer> C> Program Files> Messenger Service Received Files
9. You should see a file called PIC1234(1)(1)(1)(1)(1)(1)(1)(1).exe, right click it ONCE and select delete.
10. On the desktop click the “Recycle Bin” and click empty.

Follow the above steps in order and you should be safe from the PIC1234(1)(1)(1)(1)(1)(1)(1)(1).exe msn virus.

“President bush shooter is game that allows you to shoot Bush balzz hahaha”

To remove, do the following.

1. Press Ctrl, Alt, Del and select Choke.exe press and kill it by pressing End Task
2. Close MSN Messenger
3. Go to Start> Run> [type] “msconfig”
4. Click the tab at the top right hand corner that says “Startup”
5. Uncheck the box next to “Choke.exe”, “ShootPresidentBUSH.exe”, or “*The user name here*.exe
6. Find all using search “Choke.exe”, “ShootPresidentBUSH.exe”, or “*The user name here*.exe
7. Delete the file an Empty recycle bin

Now you are disinfected. Update your antivirus to stay safe from MSN Virus.

This virus also installs a toolbar into Internet Explorer called “Toolbar888″. Goto: Start > Control Panel > Add/Remove Programs.
Find Toolbar888 and click the “Change/Remove” button to uninstall it

Press CTRL+ALT+DELETE all at the same time so you are viewing the “Process Tab.

If you find any (or all) of the following (don’t worry if you cant find all of them):

• Update.exe
• goll.exe
• loadadv455.exe
• drsmartload.exe
• goll.exe
• two.exe
• vcncr.exe
• rorjxk.exe
• eyewblbby.exe
• cgqrvrva.exe

Highlight the name and click the button “End Process to each of the above you find in the list.

Find and Delete The Following Folders and their Contents:

• C:\Program Files\Common Files\{28676FB5-0AE9-3081-1205-03030930003d}\
• C:\Program Files\Common Files\{38676FB5-0AE9-3081-1205-03030930003d}\

Find and Delete the Following Files with the Folder (NOT the folder itself):

In the folder: C:\Windows\system32\ (don’t worry if you cant find all of them)

Find and Delete:

• goll.exe
• drv.exe
• loadadv455.exe
• one.exe
• two.exe

In the folder: C:\Documents and Settings\[current user]
(replace [current user] with the name you are currently logged on as, don’t worry if you cant find all of them)

Find and Delete:

• goll.exe
• drv.exe
• loadadv455.exe
• one.exe
• two.exe

In the folder: C:\ (main level of C drive, be careful here, don’t worry if you cant find all of them)

Find and Delete:

• goll.exe
• drv.exe
• loadadv455.exe
• one.exe
• two.exe
• drsmartload.exe

Update your Antivirus with the most current virus definitions and run a full system scan to clean up any remaining files. If you do not have any antivirus software. AVG Free is a great option.

The virus has now been deactivated. Happy? Tell us in the comments if this does not work. Also you might want to do a online scan or get an anti-virus to protect yourself in the future.

This is a fairly simple virus to get rid of. Complete the following steps and you are done removing W32.Aplore@mm 1. Close Messenger. This will simply stop any more of your contacts getting the virus.
2. Goto ‘Start’ then ‘Run’ and type ‘msconfig’. A new window should appear.
3. Click on the tab at the top right that says ‘Startup’.
4. Unitick the box next to “Explorer”.
5. Restart you Computer.

The virus has now been deactivated. Happy? Tell us in the comments if this does not work. Also you might want to do a online scan or get an anti-virus to protect yourself in the future.

photo album.zip is a file that will will prompted to be downloaded. Other filenames include IMG-0012.zip, rachel.exe, newsXX.zip, Jenny.zip and etc which comes with a message making it look like a innocent download.

There are many tools which allow you to remove these kind of viruses include:

1. Press Ctrl+Alt+Delete and look for hotkeysvc. If it’s there select it and press “End Task”.
2. Use the Windows Find feature to look for a file called “hotkeysvc.exe”. Which if their should be in the %System% directroy. If you find the file delete it.
3. Goto ‘Start’ then ‘Run’ and type ‘msconfig’. A new window should appear.
4. Click on the tab at the top right that says ‘Startup’.
5. Look for, and if it exists, unitick the box next to “hotkeysvc.exe” or simlar name.

The virus has now been deactivated. Happy? Tell us in the comments if this does not work of if it did! Also you might want to do a online scan or get an anti-virus to protect yourself in the future.

1. Close Messenger.
2. Goto ‘Start’ then ‘Run’ and type ‘msconfig’. A new window should appear.
3. Click on the tab at the top right that says ‘Startup’.
4. Untick the box next to ‘IM-Names’. (If you cannot find it skip this task)
5. Click ‘ok’ and when it asks if you want to restart your computer say no.
6. Press ‘Ctr’ + ‘Alt’ + ‘Del’. Find the processthat says ‘IM-Names’ and click End Task.

To remove it fully follow these instructions:

1. Search your computer for all files called “IM-Names”.
2. Delete all files that it finds.
3. Empty your Recylce Bin.

The virus has now been deactivated. Happy? Tell us in the comments if this does not work. Also you might want to do a online scan or get an anti-virus to protect yourself in the future.

This is works similar to the Aplore MSN Virus and replicates itself by sending a message like this to everyone on your contact list.

“is that u on that photo hxxp://dollypics.xx.funpic.org/pictures.php?photo656.jpg (link edited to prevent people getting further infected)”.

Click here to remove MSN Virus Project 1/ Generic2.EXO / Backdoor.Generic3.SAT