Windows Live/MSN Virus lurking around - image**.zip
Update: For those not aware, I released a new website earlier this year to remove MSN Viruses. This software is completely free, and will remove over 6,000 MSN viruses! For more info, visit www.msnvirusremoval.com
Windows Live Messenger, as formally known as MSN Messenger, is a popular messaging service for both the young and the old. However, it seems that more and more viruses are lurking to the surface by exploiting the system.
A new virus, dubbed the “image**.zip” virus has become popular, leeching itself to your contacts and sharing the virus onto them. The virus begins by infecting one machine, however that came
about. It then joins to your contacts, sending them a copy of a file, usually called “image24.zip”, “image25.zip”, “image35.zip” or something similar. It’s usually joined with a message such as “wow! look at this old picture i found….” or “Hey just finished my new myspace album!
theres a few kinky ones in there!”. (examples can be seen by clicking images to the right) If the contact accepts it, then the virus infects that machine and the loop continues, infecting more and more machines as it goes along.
The problem with this type of virus is that people think that a file they’re being sent is completely safe, it’s from their contacts after all isn’t it? But no, it isn’t.
Now, I’m attempting to create some type of program to remove this virus from people’s machines, or at least to the best of my abilities. So, here are my instructions to far (not yet tested but will hopefully work, please let me know if it does or doesn’t).
Prevention is the best cure
Don’t get yourself in this trouble, follow this guide:
- Don’t accept files unless you know exactly what they are, even if they are from your friends
- If you get a message such as the above mentioned, ask the user back what the file is. Usually if it’s a robot it won’t respond.
- Be safe and install anti-virus applications. They’re even good free ones such as AVG Antivirus (http://free.grisoft.com)
Remove the virus
So it’s too late, ok well now it’s time to try my removal tool. If I know it works for a large amount of people I’ll create a better application that’ll be much easier to fix the bug.
- Download http://www.miccas.net/files/remove24.reg
- Open the file, and click Yes when prompted. Then click Ok once it’s completed
- Reboot/Restart your computer
- Delete the following files (%windir% is usually c:\windows\)
- Hopefully that’ll be it! Let me know if this works.
%windir%\system\ehSched.exe
%windir%\system\IMG024.JPG.zip
Posted by 
Well, so far we’ve completely redesigned the blog, and more and more news articles are being posted. We’re still on the way of development but we’re getting there. Today, I’d like to announce a new feature on the MiCCAS.net Blog.


