live messenger virus

[ElectroMagician]

regards I have a problem with windows live messenger

I recently got a link on live messenger to a photoe I downloaded it and opened it, now its seems its not a photoe file (it said GIF) but some thing called a win32 cabinet self extractor, and what it is doing now is sending everyone the same link on msn I got

I tried uninstalling live messenger , first it wouldnt let me as vista tells me "an unknown program wants acess" I clicked cancel and then vista tells me you do not have sufficient privelages and have to be administrator and stopped the uninstallation

then I clicked allow acess tot he unknown program and it uninstalled it, then installed the new live messenger and it still has the same problem! can anyone tell me how to get rid of it, further more wehn i try uninstalling it again it also comes up with "unknown program wants acess" if I click cancel it wont let me uninstall it"

what ever it is and whoever started this malicious bug, the link you get says "haha phote" and then the link to a social networking site, which must make ppl believe they have their photoe on somewhere else

I still have the file in questiion if anyone wants further details

thnx in advance

[ElectroMagician]

Id also like to add that when I'm signed into msn I can IM ppl, but then it starts to send online ppls link and then the I can no longer IM ppl and previous IM windows disappear

[peterb]

Have a look on some of the AV websites and see if you find uninstall procedures there.

[watercooled]

What AV are you using. Try running an online scanner - ESET: eset.com/onlinescan or trendmicro: housecall.trendmicro.com

Also try uploading the file/installer to virustotal.com to check it.

[CrazyMonkey]

Ahhh these are very common. I've removed alot of them.

Please download a copy of Hijackthis - http://majorgeeks.com/download5554.html

Do a scan and save a log file.

Post the contents of the log file here, i'll analyse it.

[ToGGoT]

Yeah, online scan if you can, find out what you've got, and google it!

There are loads of free tools available to remove this sort of thing