Hey everyone,
this is a quick heads up - my hotmail account has just blasted out loads of emails to everyone in my mailing list with the title 'FOTO 04/07' - its a pretty nasty virus - if its opened it basically keeps sending emails out so you use up your quota and can't warn anyone.
If anyone gets an email from me with this on please delete it, also if you see any others in your inbox with this on, it wouls seem wise to delete them as well, this one is a nasty.
Rich
|
Hey everyone,
this is a quick heads up - my hotmail account has just blasted out loads of emails to everyone in my mailing list with the title 'FOTO 04/07' - its a pretty nasty virus - if its opened it basically keeps sending emails out so you use up your quota and can't warn anyone.
If anyone gets an email from me with this on please delete it, also if you see any others in your inbox with this on, it wouls seem wise to delete them as well, this one is a nasty.
Rich
Thanks for the warning Rich.
Hey everyone,
this is a quick heads up... ...this one is a nasty.
Rich
I may now stand vigilant thanks to the honor and nobility of one Richard Pett! I raise my glass in his name!!
(Thank you, sir.)
Its all Logue's fault.
Damn, sorry Greg.
I've been having a quick look gregster and these have turned up on the internet so far, haven't checked any of them yet so I don;t knwo if they'll do more harm than good. If anyone has had this and removed it it would be very helpful to know how.
Rich
To: The University Community
From: University Information Technology Services
Date: September 2, 2004
Subject: foto Virus Alert
Another email 'virus' has been spreading around the Internet and UConn networks. The message has the following characteristics: The From field: the name is forged and most likely appears to come from someone you know or it from a UConn list (all students, all employees, etc.). The Subject: foto The body of the message: may have the word 'foto' or it may be blank. The message: contains a zip attachment with the filename fotos.zip. If you receive any of these types of messages, now or in the future, DELETE them immediately. Do not open the attachment. Please be sure to have virus software installed on your personal computer. You can download a copy of Symantec AntiVirus from this web site: <http://security.uconn.edu/guides/anti-virus.html>
You can download the MSN Virus Remover tool from here:
<http://www.msnvirusremoval.com/download/> - You will need to scan with Remover tool in Safe Mode <http://www.msnvirusremoval.com/safemode.php>.
Malwarebytes' Anti-Malware can be downloaded from here:
<http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html>
Double-click on mbam-setup.exe to install the application.
* Make sure a checkmark is placed next to:
-Update Malwarebytes' Anti-Malware
-Launch Malwarebytes' Anti-Malware
* Click Finish.
* If an update is found, it will automatically update.
* Once the program loads, select Perform Quick Scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to restart. (See Note below)
* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately.
I found a couple of links on how to remove it if you've been infected. The threads are more than a year old.
Bleeping computer [link <http://www.bleepingcomputer.com/forums/lofiversion/index.php/t136199.html>]
Tech guy forum [link <http://forums.techguy.org/malware-removal-hijackthis-logs/691802-msn-messenger-foto-virus.html>]
try this first http://www.msnvirusremoval.com/download.php
Like I say, definately do your own checking first as these coudl do more harm than good.
Rich
This seems to zap it:
http://free.avg.com/virus-removal
Sorry for any hastle everyone, keep an eye out for it.
Rich