msn problems.

[baquero21]

Hi every body.

The problem is this:

Spyboot finds this start up key

"Estado de la base de datos: Innecesario - virus, software espía, maligno u otro tipo de programa consumidor de recursos
Valor: MsnMsgr
Nombre del archivo: MsnMsgrs.exe

Descripción
Added by the _NETSKY-AD_ WORM! "

But trying to find what s this about I couldn´t find any virus at all.
I was really sure that a virus was runnig on the computer but I´ve tryed all this programs

Nod 32, Running Antivirus
AVG
Elistar
msncleaner
Elitrip
Combofix
Dr web cureit
Spyboot
Super anti spyware

Ccleaner

Antivirus online:
Panda online scanner
Ewido

HJT cleaning followed by an expert online,

anti rootkits
Anti-Rootkits GMER
AVG-Antirootkits

Advanced WindowsCare

I´ve chequed this files in www.virustotal.com

c:/program files/windos live/messenger/msiexec.exe
c:/program files/windos live/messenger/msnmsgr.exe
c:/windows/prefetch/msnsgr.exe-3744B6D8.pf
c:/windows/prefetch/msnsgr.exe-0EBDEBC56.pf
c:/program files/windos live/messenger/msvs.exe
C:\WINDOWS\system32/msiexec.exe
c:/program files/windos live/messenger/installer/dashboard.exe
c:/program files/windos live/messenger/installer/WlsetupSvc.exe

But I can´t find anything.


In this Forums is the history of the case:
http://comunidad.wilkinsonpc.com.co/cgi-bin/foros/index.cgi?board=HijackThis;action=display;num=1186977044;start=
http://www.forospyware.com/t106338.html#post462193
http://foros.zonavirus.com/viewtopic.php?p=109559#109559

Any clue, whats happening?

Cheers.
(excuse my english):)

[Zenobia]

What color is Spybot showing that line as in your start-up list?
What Value and Current Filename is listed there?

[baquero21]

Color: Yellow
Value: MsnMsgr
File Name: C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background

[Zenobia]

That is most likely okay.Please see here:
http://www.castlecops.com/s2290-msnmsgr.html
And I checked on another trusted website,and that path should be okay too.

This looks like the description that Spybot gives when you click the grey button to the right,is that correct?


"Estado de la base de datos: Innecesario - virus, software espía, maligno u otro tipo de programa consumidor de recursos
Valor: MsnMsgr
Nombre del archivo: MsnMsgrs.exe

Descripción
Added by the _NETSKY-AD_ WORM! "

If so,that part is just the description from the startup list,telling you what that startup entry could possibly be.
This part is from your own computer:
File Name: C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background

So,you'd compare Current Filename to the Nombre del archivo in the description:
File Name: C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background----
->Nombre del archivo: MsnMsgrs.exe

So,yours is not MsnMsgrs.exe,so in most cases,that would be okay.
Also,if your Current Filename was this:
File Name: C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background
then Spybot should display that line in the startup section as red,not yellow.

I think your english is very good,by the way. :) But,if there is some part of my description you do not understand where it is in English,let me know,and I will try to explain it better.

[Zenobia]

Also,if your Current Filename was this:
File Name: C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background
then Spybot should display that line in the startup section as red,not yellow

Sorry,I meant to say:
Also,if your Current Filename was this:
File Name: C:\Archivos de programa\Windows Live\Messenger\MsnMsgrs.Exe" /background
then Spybot should display that line in the startup section as red,not yellow. :oops: