Re: OT Problem Resolved - MSN Messenger won't stop "starting"

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Jisha (fake_at_exists.not)
Date: 03/05/04 

Date: Fri, 5 Mar 2004 14:16:42 -0500

I sent the file to Symantec for analysis, and received a reply yesterday.

The file (but not this newsgroup message) was infected with the
"Download.Trojan".

NAV initially did not pick up this infection.
But, after I downloaded and installed their latest "Beta Definitions", it
was picked up immediately.

I suggest that any NAV users out there go to the Symantec Website and update
your virus definitions manually.
http://securityresponse.symantec.com/avcenter/download.html

If you haven't already done so, you will have to install their "Intelligent
Updater"

The URL they sent me for this particular "Beta Definition" is:
ftp://ftp.symantec.com/public/english_us_canada/antivirus_definitions/norton_antivirus/beta/symcbetadefsi32.exe

Chris

"Jisha" <fake@exists.not> wrote in message
news:eTpxxrg$DHA.4028@tk2msftngp13.phx.gbl...
> Hey, Jonathan,
>
> BTW.... I can tell you're pretty knowledgeable... but I don't know how
much
> you know about scripting.
>
> I wonder If you would do me a favor and look at another post.... It's been
> up for a while, but no responses.... maybe because the subject line is a
> little scary.... or no one has anything to respond with?
>
> It looks like a script file, but it popped up from the internet in a
notepad
> window, so it's totally text and not executable.
> I have NAV's "Script Blocking" Feature enabled, so maybe that's why just
> popped up, instead of running...
>
> I originally posted it to Symantec's newsgroup... but got no help there,
> either.
> I run NAV every day... always clean.
> I sent it off to Symantec for analysis, and it came back clean.
> I also ran Trend Micro's online scan... totally clean.
> Ad-Aware and SpyBot comes up clean.
> So, I'm pretty sure that NAV saved my ***... but not 100% sure.
>
> The thing is... before I delete (actually shred) the file, I'd like to
have
> some understanding of what this thing was attempting to do, and I want to
> make sure that this is not a symptom of some as yet undetected virus,
> Trojan, etc, on my system.
>
> I'd really appreciate your feed back.
>
> Thanks again
> Chris
>
> Here's the URL to the original post:
> news:eSDp9sA$DHA.3220@TK2MSFTNGP10.phx.gbl
>
>
>
>
>
>
> "Jisha" <fake@exists.not> wrote in message
> news:eu6Dggg$DHA.2804@tk2msftngp13.phx.gbl...
> > Hi Jonathan
> >
> > Well, that seems to have done the trick.
> > I've started Outlook Express a few times, and the Messenger didn't start
> > with it.
> >
> > Lets keep our fingers crossed... but I think you nailed it.
> >
> > Thanks again... very much!
> > I don't think I can fully express how _irritating_ that was!!!
> >
> > Chris
> >
> >
> >
> > "Jonathan Kay [MVP]" <msnewsreplies@jonathankay.com> wrote in message
> > news:%23ssYcLa$DHA.3712@tk2msftngp13.phx.gbl...
> > > Hi Chris,
> > >
> > > Yes, Outlook Express will start it as well. To stop this from loading
> > with Outlook Express,
> > > close Outlook Express, then download and run the following .reg file:
> > > http://messenger.jonathankay.com/downloads/stopmessenger_oe_9x.reg
> > >
> > > After this, Messenger will no longer start with Outlook Express.
> > > ____________________________________________
> > > Jonathan Kay
> > > Microsoft MVP - MSN Messenger/Windows Messenger
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone/
> > > Messenger Resources - http://messenger.jonathankay.com
> > >
> > > "Jisha" <fake@exists.not> wrote in message
> > news:uaJLBEa$DHA.1548@TK2MSFTNGP12.phx.gbl...
> > > > Uh... Oh... maybe I replied too quickly. :((
> > > >
> > > > I disabled the "Instant Messenger" Feature in NAV... and I was
_sure_
> > you
> > > > had hit-the-nail-on-the-head... but guess what?
> > > > It popped up AGAIN!
> > > >
> > > > At first I thought it was random (or worse, a trojan etc) ... but I
> have
> > now
> > > > realized that MSN Messenger starts and logs itself in EVERY TIME
I
> > open
> > > > Outlook Express!!!
> > > >
> > > > So, Why does Outlook Express 6 want to automatically start MSN
> > Messenger...
> > > > and how can I stop it?
> > > >
> > > > TIA
> > > > Chris
> > > >
> > > > PS: I've added the Outlook Express for IE6 newsgroup with this
> message.
> > > >
> > > >
> > > >
> > > >
> > > > "Jonathan Kay [MVP]" <msnewsreplies@jonathankay.com> wrote in
message
> > > > news:eNePraW$DHA.3120@TK2MSFTNGP11.phx.gbl...
> > > >> Hi Chris,
> > > >>
> > > >> You're very welcome =)
> > > >> ____________________________________________
> > > >> Jonathan Kay
> > > >> Microsoft MVP - MSN Messenger/Windows Messenger
> > > >> Associate Expert
> > > >> http://www.microsoft.com/windowsxp/expertzone/
> > > >> Messenger Resources - http://messenger.jonathankay.com
> > > >>
> > > >> "Jisha" <fake@exists.not> wrote in message
> > > > news:%23da0ANW$DHA.2180@TK2MSFTNGP09.phx.gbl...
> > > >> > Wow, thanks Jonathan!
> > > >> >
> > > >> > Your're Right... NAV 2004 has that feature... and I disabled it.
> > > >> > Thanks allot!
> > > >> >
> > > >> > Chris
> > > >> >
> > > >> >
> > > >> > "Jonathan Kay [MVP]" <msnewsreplies@jonathankay.com> wrote in
> message
> > > >> > news:ewEaZeV$DHA.688@tk2msftngp13.phx.gbl...
> > > >> >> Greetings Josha,
> > > >> >>
> > > >> >> I noticed you mentioned NAV. Recent versions of Norton
Antivirus
> > added
> > > > a
> > > >> > new "instant
> > > >> >> messaging scanning" feature, which can conflict with Messenger
and
> > > > cause
> > > >> > it to also keep
> > > >> >> starting. To stop it, open Norton Antivirus (Right-click on the
> > Norton
> > > >> > Antivirus icon in the
> > > >> >> System Tray/Notification Area (by the clock), choose 'Open
Norton
> > > >> > Antivirus'), click Options,
> > > >> >> then Instant Messenger then uncheck MSN Instant Messenger and
> click
> > OK.
> > > >> >> ___________________________________________
> > > >> >> Jonathan Kay
> > > >> >> Microsoft MVP - MSN Messenger/Windows Messenger
> > > >> >> Associate Expert
> > > >> >> http://www.microsoft.com/windowsxp/expertzone/
> > > >> >> Messenger Resources - http://messenger.jonathankay.com
> > > >> >>
> > > >> >> "Jisha" <fake@exists.not> wrote in message
> > > >> > news:u7sTN2U$DHA.2520@TK2MSFTNGP11.phx.gbl...
> > > >> >> > Recently upgraded to MSN Messenger 6.1.
> > > >> >> > Since then, I've notice it in the system tray... having
started
> > and
> > > >> > logged
> > > >> >> > on by itself.
> > > >> >> >
> > > >> >> > I've triple-checked that these options are disabled:
> > > >> >> > "Automatically run... when I log onto Windows" and
> > > >> >> > "Allow automatic sign in when connected to the internet"
> > > >> >> >
> > > >> >> > I've searched for it using CodeStuff Starter and MSconfig, and
> > cannot
> > > >> > find
> > > >> >> > ANY start-up reference for msnmsgr.exe... anywhere!
> > > >> >> >
> > > >> >> > What gives?
> > > >> >> > Is this a program bug?
> > > >> >> > Malware?
> > > >> >> >
> > > >> >> > I regularly scan with NAV, Ad-Aware and SpyBot... never
anything
> > to
> > > >> > speak
> > > >> >> > of...
> > > >> >> >
> > > >> >> > OMG... it just did it again... I looked 5 seconds ago and no
MSN
> > > >> > messenger
> > > >> >> > icon... and now it's there!
> > > >> >> >
> > > >> >> > This is really irritating!
> > > >> >> > Any thoughts?
> > > >> >> >
> > > >> >> > TIA
> > > >> >> > Chris
> > > >> >> >
> > > >> >> >
> > > >> >> > PS: OS is Win2000 SP-4
> > > >> >> >
> > > >> >> > PSS: My apologies for multi-posting on this... but there's
been
> no
> > > >> > response
> > > >> >> > in the group I sent to originally.
> > > >> >> >
> > > >> >> >
> > > >> >>
> > > >> >>
> > > >> >
> > > >> >
> > > >>
> > > >>
> > > >
> > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Quantcast