Wednesday, June 27, 2007

Warning: Undetected MSN messenger worm -

Hopefully I won't get flagged for this, but it's my duty to warn people about the presence of living or computer virus.

Looking for a sexy 'behind'? Well not here! This is a VIRUS REPORT! The program is NOT DETECTED YET (check out the screenshot) at the time of writing! (active) (purged) (purged)

I've discovered this while I was checking some links gathered with the help of an eggdrop script of mine
mwrouin-m-! MSG!#cyprus
hey check :O

(....... have replaced the filename)
This malware is undetected by most antivirus at the time of writing, so watch it: = BAD

The dude above is not the spammer. The malware somehow is spammed through IRC instead of MSN. This malware/trojan/virus/worm/bad exe, whatever you might want to call it, is spreading around replacing the MSN executable.
Some of my friends believe that this is the 'new' Virtumonde. It might just use its registry keys, but the MSN spamming is a whole new thing I guess!

UPDATE: The website is now down!
UPDATE 2: The website has changed to (but it was down when I was notified)
UPDATE 3: Solutions 1) Vundofix 2) VundoBeGone 3) Uninstall,restart and reinstall MSN Messenger from here:
4) Try out one of my generic cleaners, cwean pack:

You are encouraged to download the executable and upload it to or

More info about the lil' buger at the Kaspersky's website


hclatwr said...

It seems it has switched servers

Gabriel said...

I just received it from this server too.

medigeek said...

By the time I looked at it, it was already down. If you have downloaded the executable please pass it to or so the big antivirus companies can have their sources updated :)

Anonymous said...

um, i just got a notification from the server isnt down any more!