*updated* Webcam messenger virus

How to remove this virus:
After installing, the virus creates two files on your computer:

C:Windowsupdater.com
C:Windowsadmintxt.txt

To remove it, you must delete both files. As it also makes sure to start up when you boot your computer, you must also remove the entry from the startup list. A guy in his blog suggests Startup Control Panel, but if you don’t want (or can’t) install new software on the machine, go to:

1. press start menu -> run -> type “msconfig” (without quotes)
2. go to the startup tab
3. uncheck updater.exe

Restart your computer and hope it’s cured! :D

————–

I guess it’s a new virus, so if you get it, don’t fall for it.
It looks like this:

contact says:
haha :p http://webcams.somehost.net/watch.php?=your@messenger.mail

It opens up a page like YouTube with a warning on the top that you don’t have Flash installed. If you click there, you are linked to an .exe file which i guess contains a virus.

Good luck!

If you liked this post think about subscribing to my RSS feed and prevent missing anything interesting. It's free, fast and doesn't hurt. Promise. Click here.
Rate this post:

9 Comments »

  1. victim of it Says:

    OMG SO HOW DO I REMOVE IT? LOL

  2. nasal Says:

    The first obvious question i have is: do you have an antivirus installed? :p

  3. victim of it Says:

    of course i do.. i had avg.. but it didnt detect anything.. i did update it all the way.. doesn’t works.. its still spreading these links to my contacts regulary

  4. victim of it Says:

    its seems like after i update my avg earlier again 5mins ago, it found a trojan processor called updater.com (not .exe)
    Is this virus the processor’s doing?

    Its really had to tell if i had it removed already anot.. cause this virus don’t goes active always. I was watching some video clips earlier on and it suddenly start flooding all my other contacts to the fake webcam.com web earlier on, minimizing me out from full screen, switching my active processor to msn messenger

  5. nasal Says:

    .com files are executables like .exe files, to there is a possibility this is it..

    could you send it to me via email? try to search for it and if you find it, compress it with winzip or winrar..

  6. victim of it Says:

    sure, how do i know your email by the way? =/

  7. nasal Says:

    sure, sorry :) it’s nasal@zurka.us

  8. victim of it Says:

    By the way I just found more info here..
    http://translate.google.com.sg/translate?hl=en&sl=sv&u=http://www.ehsan.me/2008/10/03/msn-virus/&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3DC:%255CWindows%255Cupdater.com%26hl%3Den%26client%3Dfirefox-a%26rls%3Dorg.mozilla:en-US:official%26sa%3DG

    google translated it quite well from swedish, apparently this virus is most common in Sweden, though I happened to be in Singapore. Most google result turns out to be in Swedish.

  9. nasal Says:

    thank you very much, i will update the post!

RSS feed for comments on this post. TrackBack URL

Leave a comment