MSN Virus Removal

Choke.exe worms origins are traced back to Netherlands. It spreads only via MSN messenger. This pesky MSN virus worm spreads with the following message in your messenger

“President bush shooter is game that allows you to shoot Bush balzz hahaha”

To remove, do the following.

1. Press Ctrl, Alt, Del and select Choke.exe press and kill it by pressing End Task
2. Close MSN Messenger
3. Go to Start> Run> [type] “msconfig”
4. Click the tab at the top right hand corner that says “Startup”
5. Uncheck the box next to “Choke.exe”, “ShootPresidentBUSH.exe”, or “*The user name here*.exe
6. Find all using search “Choke.exe”, “ShootPresidentBUSH.exe”, or “*The user name here*.exe
7. Delete the file an Empty recycle bin

Now you are disinfected. Update your antivirus to stay safe from MSN Virus.

How to get remove MSN Virus Project 1/ Generic2.EXO / Backdoor.Generic3.SAT

This virus also installs a toolbar into Internet Explorer called “Toolbar888″. Goto: Start > Control Panel > Add/Remove Programs.
Find Toolbar888 and click the “Change/Remove” button to uninstall it

Press CTRL+ALT+DELETE all at the same time so you are viewing the “Process Tab.

If you find any (or all) of the following (don’t worry if you cant find all of them):

• Update.exe
• goll.exe
• loadadv455.exe
• drsmartload.exe
• goll.exe
• two.exe
• vcncr.exe
• rorjxk.exe
• eyewblbby.exe
• cgqrvrva.exe

Highlight the name and click the button “End Process to each of the above you find in the list.

Find and Delete The Following Folders and their Contents:

• C:\Program Files\Common Files\{28676FB5-0AE9-3081-1205-03030930003d}\
• C:\Program Files\Common Files\{38676FB5-0AE9-3081-1205-03030930003d}\

Find and Delete the Following Files with the Folder (NOT the folder itself):

In the folder: C:\Windows\system32\ (don’t worry if you cant find all of them)

Find and Delete:

• goll.exe
• drv.exe
• loadadv455.exe
• one.exe
• two.exe

In the folder: C:\Documents and Settings\[current user]
(replace [current user] with the name you are currently logged on as, don’t worry if you cant find all of them)

Find and Delete:

• goll.exe
• drv.exe
• loadadv455.exe
• one.exe
• two.exe

In the folder: C:\ (main level of C drive, be careful here, don’t worry if you cant find all of them)

Find and Delete:

• goll.exe
• drv.exe
• loadadv455.exe
• one.exe
• two.exe
• drsmartload.exe

Update your Antivirus with the most current virus definitions and run a full system scan to clean up any remaining files. If you do not have any antivirus software. AVG Free is a great option.

The virus has now been deactivated. Happy? Tell us in the comments if this does not work. Also you might want to do a online scan or get an anti-virus to protect yourself in the future.

How to get rid of MSN virus W32.Aplore@mm

This is a fairly simple virus to get rid of. Complete the following steps and you are done removing W32.Aplore@mm 1. Close Messenger. This will simply stop any more of your contacts getting the virus.
2. Goto ‘Start’ then ‘Run’ and type ‘msconfig’. A new window should appear.
3. Click on the tab at the top right that says ‘Startup’.
4. Unitick the box next to “Explorer”.
5. Restart you Computer.

The virus has now been deactivated. Happy? Tell us in the comments if this does not work. Also you might want to do a online scan or get an anti-virus to protect yourself in the future.

Another annoying virus hits MSN Messenger. Its more annoying than be a threat to your computer data. To remove this virus called MSN Virus IM-Names:

1. Close Messenger.
2. Goto ‘Start’ then ‘Run’ and type ‘msconfig’. A new window should appear.
3. Click on the tab at the top right that says ‘Startup’.
4. Untick the box next to ‘IM-Names’. (If you cannot find it skip this task)
5. Click ‘ok’ and when it asks if you want to restart your computer say no.
6. Press ‘Ctr’ + ‘Alt’ + ‘Del’. Find the processthat says ‘IM-Names’ and click End Task.

To remove it fully follow these instructions:

1. Search your computer for all files called “IM-Names”.
2. Delete all files that it finds.
3. Empty your Recylce Bin.

The virus has now been deactivated. Happy? Tell us in the comments if this does not work. Also you might want to do a online scan or get an anti-virus to protect yourself in the future.

Virus Name : MSN Virus Project 1/ Generic2.EXO / Backdoor.Generic3.SAT

This is works similar to the Aplore MSN Virus and replicates itself by sending a message like this to everyone on your contact list.

“is that u on that photo hxxp://dollypics.xx.funpic.org/pictures.php?photo656.jpg (link edited to prevent people getting further infected)”.

Click here to remove MSN Virus Project 1/ Generic2.EXO / Backdoor.Generic3.SAT

Virus Name : W32.Aplore@mm
Symptoms : This MSN Messenger Virus spreads virally amongst the infected persons contact list and then on to others and so forth by sending a message to everyone on the contact list. If you have been infected by this MSN Virus, it is possibly that you clicked on a message like this:

{YOUR_FRIEND} says:
this is cool, http://NNN.NNN.NN.NN:PPPP

where http://NNN.NNN.NN.NN:PPPP is a ip address with a port attached to it.

OR

{YOUR_FRIEND} says:
btw, download this, http://NNN.NNN.NN.NN:PPPP

Click Here to Remove MSN virus W32.Aplore@mm