MSN spread sexy album virus

As instant messaging becomes increasingly popular, this chat tool has become a major source of transmission for many viruses. At present, a MSN "sexy album" worm virus is spreading wildly through MSN.

According to reports, the virus will automatically search the computer's MSN Contact list, to all the contacts randomly sent a seductive English message, and tried to transfer the name "Photos.zip" compressed package.

Anti-virus experts said that the virus information is dynamic, so each display is not the same, users are careful not to receive MSN friends sent over suspicious files. According to experts, the virus is very covert, toxic computer no abnormal performance, and contains the virus compression package after decompression will be poisoned.

It is understood that there are already a large number of users infected with this virus, anti-virus experts to remind users to upgrade anti-virus software in a timely manner, or download the anti-virus manufacturers launched virus killing tools.

Remove virus Scheme manually

First, delete the virus in the Registry startup project

1. Click the "Start" menu and select Run. Enter "Regedit.exe" to start Registry Editor.

2. Open the Hkey_local_machine\software\microsoft\windows\currentversion\shellserviceobjectdelayload item and find the name "Syshosts" , and record its value.

3. Delete the syshosts item.

4. Open the HKEY_CLASSES_ROOT\CLSID entry in the registry, find the item just recorded, delete.

5. Restart the computer.

Second, delete the virus file

1. Open "My Computer", select Menu "Tools" → "Folder Options", click "View", Cancel "Hide protected operating system files" tick before, and in the "Hidden Files and Folders" Item select "Show All Files and folders", and then click OK. Also cancel the tick before "hide extension of known type file" and click "OK".

2. Enter the Windows folder (default is C:\Windows) and locate the file named "Photos.zip" and delete it.

3. Enter the system folder (default is C:\Windows\system32), locate the file named "Syshosts.dll" and delete it.

4. Restart the computer again to see if the two files exist, if not, then the virus has been cleared clean.