Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.
Hi Leo and the chap sporting msmsger.exe...
prevx.com have it on file already - search msmsger.exe and you will get: http://spywarefiles.prevx.com/RRHDHD32771468/msmsger%252Eexe.html
What I like about prevx is that it probably won't allow the file on the computer in the first place, but even if it did it certainly would not allow the program to run without a specific yes from its online database or me... http://prevx.com
Well worth a look...
Lou
Posted by: Lou Gascon at January 27, 2007 2:58 AM
Excellent warning and clear explanation.
Posted by: BombayGranny at January 27, 2007 11:05 PM
That comment, unfortunately, illustrates one of the reasons that malware
authors use names that are so similar to other thing.
The article here talks about "msmsger.exe" - the article on
audiymypc.com doesn't mention "msmsger.exe" at all. Many similar names,
but NOT the exact same name.
That's important. Make sure you are carefully examining the correct
information for the exact name you you're seeing.
Leo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
Posted by: Leo Notenboom at February 2, 2007 9:34 AM
I recognized the similarity to a line in my computer when I was trying to trim my startup programs, so I was relieved to find from checking here that mine was the 'good' one. But if I hadn't already read the article, I wouldn't even have known that there was anything to check. An index of topics you've answered would be helpful. Do you already have one, and how do I access it? If not, I'd be willing to help set one up, which I have done in the past, but just on paper, never on a computer. I think an indepth index would be helpful, so let me know--with instructions--if I can be of help. BombayGranny
Posted by: BombayGranny at February 2, 2007 6:38 PM
A while back my firewall informed me that msmger.exe was being blocked and asked me what I wanted to do with it. I didn't know what it is so I told the firewall to ask me again later. Then my system started lagging badly while trying to web surf. As soon as I removed msmsger My system started running good again. This thing is a malware so if you get it remove it.
Posted by: stueycaster at February 3, 2007 7:13 AM
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Again, folks, the the filename in that previous comment is not the same
as the filename that started this article. >>Pay careful attention to
the filename
Posted by: Leo Notenboom at February 3, 2007 9:23 AM
59.16.41.33:6667
The worm opens an IRCout event to that IP address an Port. I dont know the relevance of this, maybe someone will.
Posted by: WhoKnowz at February 18, 2007 10:45 PM
Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.
Comments
Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.
Hi Leo and the chap sporting msmsger.exe...
Posted by: Lou Gascon at January 27, 2007 2:58 AMprevx.com have it on file already - search msmsger.exe and you will get: http://spywarefiles.prevx.com/RRHDHD32771468/msmsger%252Eexe.html
What I like about prevx is that it probably won't allow the file on the computer in the first place, but even if it did it certainly would not allow the program to run without a specific yes from its online database or me...
http://prevx.com
Well worth a look...
Lou
Excellent warning and clear explanation.
Posted by: BombayGranny at January 27, 2007 11:05 PMhttp://www.auditmypc.com/process/msmsgs.asp
Posted by: etharooni at February 2, 2007 12:45 AMIts a worm.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
That comment, unfortunately, illustrates one of the reasons that malware
authors use names that are so similar to other thing.
The article here talks about "msmsger.exe" - the article on
audiymypc.com doesn't mention "msmsger.exe" at all. Many similar names,
but NOT the exact same name.
That's important. Make sure you are carefully examining the correct
information for the exact name you you're seeing.
Leo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
iD8DBQFFw3YjCMEe9B/8oqERAgAQAJ0TKqD+MmLFoGwGTjieULFG6QrbAwCdErRL
Posted by: Leo Notenboom at February 2, 2007 9:34 AM5pC3bsr0aKdWsFDNrGYpvzI=
=Z/YK
-----END PGP SIGNATURE-----
I recognized the similarity to a line in my computer when I was trying to trim my startup programs, so I was relieved to find from checking here that mine was the 'good' one. But if I hadn't already read the article, I wouldn't even have known that there was anything to check. An index of topics you've answered would be helpful. Do you already have one, and how do I access it? If not, I'd be willing to help set one up, which I have done in the past, but just on paper, never on a computer. I think an indepth index would be helpful, so let me know--with instructions--if I can be of help. BombayGranny
Posted by: BombayGranny at February 2, 2007 6:38 PMA while back my firewall informed me that msmger.exe was being blocked and asked me what I wanted to do with it. I didn't know what it is so I told the firewall to ask me again later. Then my system started lagging badly while trying to web surf. As soon as I removed msmsger My system started running good again. This thing is a malware so if you get it remove it.
Posted by: stueycaster at February 3, 2007 7:13 AM-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Again, folks, the the filename in that previous comment is not the same
Posted by: Leo Notenboom at February 3, 2007 9:23 AMas the filename that started this article. >>Pay careful attention to
the filename
59.16.41.33:6667
The worm opens an IRCout event to that IP address an Port. I dont know the relevance of this, maybe someone will.
Posted by: WhoKnowz at February 18, 2007 10:45 PMTo post a comment on "What is msmsger.exe?", please return to that article's main page.