NiceHello steals your MSN Messenger password

A recently discovered virus codenamed Win32.NiceHello.A@mm is spreading as an e-mail attachment and targets MSN Messenger users.

The virus sends email messages (in the format described above) to the user"s MSN/.NET Messenger"s contacts to mass-multiply itself. It also tries to send a notification email:

From: nemesis@olimpo.com

To: jcrivas77@yahoo.com

Subject: Hello world :) have a nice day

Body:

Eventually, a message box with "Microsoft Windows XP or greated required!" appears.

    How to see if you"re infected:

  • The file "systemsys64dvr.exe" or "system32sys64dvr.exe" exists in the Windows folder.

  • There"s a registry entry "HKLMSoftwareMicrosoftWindowsCurrentVersionRunSystem 64 Driver for Games" = "sys64drv.exe".

Delete this file and registry entry to disinfect.

View: BitDefender.com advice

News source: Mess with MSN Messenger

Report a problem with article
Next Article

Microsoft Windows XP Peer-To-Peer Beta

Previous Article

Laptop makers mobilize Pentium-M models