Ok he is a little guide to removing 4 types of the MSN Messenger virus from you PC.

First of all, cute.pif it sends all people on your buddy list this

QUOTE

omg this is funny!
*link to download cute.pif from jose.rivera4.home.att.net*

Here is how to remove it...
1. Hit Ctrl,Alt,Delete on the keypad, look for "hotkeysvc." select it and press "End Task" (if it is on there...).
2. Use the Search feature to look for "hotkeysvc.exe". It will be in the %System% directroy, if it is there at all. Delete that file.
3. Go to Start> Run> [type] msconfig
4. Click the tab at the top right hand corner of the program that poped up that says "Startup".
5. Look for "hotkeysvc.exe" or something like that and uncheck the box next to it.

Ok, now to remove the PIC1234(1)(1)(1)(1)(1)(1).exe...
1. Close MSN (if not already closed)
2. Goto 'Start> Run' [type] "msconfig"
3. Click the tab at the top right hand corner of the window that pop up that says "Startup"
4. Uncheck the box next to "MSN Messenger".
5. Hit Ok, when it asks if you want to restart your computer say "no".
6. Hit Ctr, Alt, Del find "MsgSpread" and click End Task (if the file is there).
7. On the Desktop, open My Documents.
8. Double click "Messenger Service Received Files" if you dont see a folder called that then go to My Computer> C> Program Files> Messenger Service Received Files
9. You should see a file called PIC1234(1)(1)(1)(1)(1)(1)(1)(1).exe, right click it ONCE and select delete.
10. On the desktop click the "Recycle Bin" and click empty.

Now for Choke.exe...
1. Hit Ctrl, Alt, Delete select Choke.exe press "End Task"
2. Close MSN (if not already closed...)
3. Go to Start> Run> [type] "msconfig"
4. Click the tab at the top right hand corner that says "Startup"
5. Uncheck the box next to "Choke.exe", "ShootPresidentBUSH.exe", or "*The user name here*.exe
6. Use windows search, and look for for "Choke.exe", "ShootPresidentBUSH.exe", or "*The user name here*.exe
7. Right click the file once, and select delete.
8. On the desktop open the "Recyle Bin" and empty the recycle bin.

Now to remove W32.Aplore@mm... (only deactivate actually...)
1. Close MSN (if you haven't already)
2. Go to Start> Run> [type] "msconfig"
3. Click the tab at the top right hand corner that says "Startup"
4. Uncheck the box next to "Explorer"
5. Restart your PC

If you have any questions, reply or PM me...

   Thu Apr 14, 2005    Reply         

   Fri Apr 15, 2005    Reply         

if you got any experience with msn that your contacts are complaining about something i suggest that you try those 4 steps,
btw
great tut

   Fri Apr 15, 2005    Reply         

   Fri Apr 15, 2005    Reply         

   Fri Apr 15, 2005    Reply         

Nice tutorial. I did not have one of these viruses though . Ill check daily

   Mon Aug 8, 2005    Reply         

QUOTE (GMUniversity)

Ok he is a little guide to removing 4 types of the MSN Messenger virus from you PC.

First of all, cute.pif it sends all people on your buddy list this
Here is how to remove it...
1. Hit Ctrl,Alt,Delete on the keypad, look for "hotkeysvc." select it and press "End Task" (if it is on there...).
2. Use the Search feature to look for "hotkeysvc.exe". It will be in the %System% directroy, if it is there at all. Delete that file.
3. Go to Start> Run> [type] msconfig
4. Click the tab at the top right hand corner of the program that poped up that says "Startup".
5. Look for "hotkeysvc.exe" or something like that and uncheck the box next to it.

Ok, now to remove the PIC1234(1)(1)(1)(1)(1)(1).exe...
1. Close MSN (if not already closed)
2. Goto 'Start> Run' [type] "msconfig"
3. Click the tab at the top right hand corner of the window that pop up that says "Startup"
4. Uncheck the box next to "MSN Messenger".
5. Hit Ok, when it asks if you want to restart your computer say "no".
6. Hit Ctr, Alt, Del find "MsgSpread" and click End Task (if the file is there).
7. On the Desktop, open My Documents.
8. Double click "Messenger Service Received Files" if you dont see a folder called that then go to My Computer> C> Program Files> Messenger Service Received Files
9. You should see a file called PIC1234(1)(1)(1)(1)(1)(1)(1)(1).exe, right click it ONCE and select delete.
10. On the desktop click the "Recycle Bin" and click empty.

Now for Choke.exe...
1. Hit Ctrl, Alt, Delete select Choke.exe press "End Task"
2. Close MSN (if not already closed...)
3. Go to Start> Run> [type] "msconfig"
4. Click the tab at the top right hand corner that says "Startup"
5. Uncheck the box next to "Choke.exe", "ShootPresidentBUSH.exe", or "*The user name here*.exe
6. Use windows search, and look for for "Choke.exe", "ShootPresidentBUSH.exe", or "*The user name here*.exe
7. Right click the file once, and select delete.
8. On the desktop open the "Recyle Bin" and empty the recycle bin.

Now to remove W32.Aplore@mm... (only deactivate actually...)
1. Close MSN (if you haven't already)
2. Go to Start> Run> [type] "msconfig"
3. Click the tab at the top right hand corner that says "Startup"
4. Uncheck the box next to "Explorer"
5. Restart your PC

If you have any questions, reply or PM me...
Link: view Post: 129215

   Thu Aug 23, 2007    Reply         

   Mon Nov 12, 2007    Reply         

   Sat Dec 8, 2007    Reply         

   Mon Dec 17, 2007    Reply         

   Tue Dec 25, 2007    Reply         

good tutorial...is very useful
TNX

   Mon Jan 7, 2008    Reply         

   Mon Jan 7, 2008    Reply         

   Tue Mar 4, 2008    Reply         

   Tue Mar 4, 2008    Reply         

   Thu Mar 27, 2008    Reply         

   Fri Apr 11, 2008    Reply         

   Sun Apr 20, 2008    Reply         

   Wed Apr 23, 2008    Reply         

great tut - by the way cant we all use antivirus? AVG is great

Yeah great tut i will keep it in mind - my brother uses MSN quite alot and he doesnt bother what people send him (worrying).

   Fri Apr 25, 2008    Reply         

   Sun Apr 27, 2008    Reply         

   Wed Apr 23, 2008    Reply         

   Tue May 6, 2008    Reply         

   Tue Jun 17, 2008    Reply         

Ah, good tutorial...Luckily I haven't been sent any virii or anything...I use Trillian,

Regardless, great job on this and it seems very helpful and informative. I've always hated when I need help with a certain virus and can't find anything online or spend hours upon hours searching.

   Wed Jun 18, 2008    Reply         

   Wed Jun 18, 2008    Reply         

   Wed Jun 18, 2008    Reply         

   Thu Jun 19, 2008    Reply         

   Thu Jun 19, 2008    Reply         

Brilliant guide - I got a "trojan horse backdoor IRCbot" i checked this on the intenet - and it turned out to be quite a high risk virus, I found that My antivirus could get rid of it - even one of the free ones i tried - Althoough I found that wenever i used the free one, it seemed to re apear, and after getting rid of it the second time, it disapeared. Brilliant guide - Those viruses are SOOO annoying

   Thu Jun 19, 2008    Reply         

canute24

aeren

mrdee