Emsisoft Malware-Info
Name: Adware.Win32.MessengerPlus
Risklevel: Low Risk
Company: Patchou - http://www.msgpluslive.net
Description:
Messenger Plus contains trojan.
Removal instructions for Adware MessengerPlus:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware MessengerPlus.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Installation: Installed through EXE
Process: MsgPlus.exe
Screenshots:
Used folders:
- C:\Program Files\Adverts\
- C:\Program Files\MessengerPlus! 3\
- C:\Program Files\MessengerPlus! 3\Plugins\
- C:\Program Files\MessengerPlus! 3\Resources\
- C:\Documents and Settings\[USER]\Cookies\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\
Used files:
- C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\iehacks[1].css
[2971 Bytes] CSS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\iepngfix[2].htc
[1808 Bytes] HTC File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\mp3install[1].htm
[7820 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\msgpluslive-logo[1].png
[5348 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\bullet-sidebar[1].gif
[48 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\content_header_48a7db[1].png
[3615 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\content_roundedbox_ie6[1].png
[1294 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\gfdd[1].png
[5900 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\render_ads[2].js
[287 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\setupend2[1].htm
[242 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\skin[1].css
[6739 Bytes] CSS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\sma8[1].js
[4548 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\SRIDQBO7\sma_blank[1].png
[660 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\abg-en-100c-000000[1].png
[1006 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\colorize[1].png
[368 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\global[1].css
[8476 Bytes] CSS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\icon_scripts_small[1].gif
[1081 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\setupend[1].htm
[1 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\show_ads[2].js
[35568 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\YNQ1M5MT\test_domain[2].js
[52 Bytes] JS File - C:\Program Files\Adverts\uninst.exe
[408576 Bytes] EXE File - C:\Program Files\MessengerPlus! 3\Detoured.dll
[4096 Bytes] DLL File - C:\Program Files\MessengerPlus! 3\Lame_enc.dll
[339968 Bytes] DLL File - C:\Program Files\MessengerPlus! 3\Libsndfile.dll
[344064 Bytes] DLL File - C:\Program Files\MessengerPlus! 3\MsgPlus.exe
[190024 Bytes] EXE File - C:\Program Files\MessengerPlus! 3\MsgPlusH.dll
[1914440 Bytes] DLL File - C:\Program Files\MessengerPlus! 3\MsgPlusLoader.dll
[58952 Bytes] DLL File - C:\Program Files\MessengerPlus! 3\Readme.txt
[3529 Bytes] TXT File - C:\Program Files\MessengerPlus! 3\RichEdHook.dll
[40960 Bytes] DLL File - C:\Program Files\MessengerPlus! 3\Plugins\Developers.txt
[167 Bytes] TXT File - C:\Program Files\MessengerPlus! 3\Resources\DefaultLg.dat
[96862 Bytes] DAT File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Arabic.ini
[153056 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Catala.ini
[179432 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Chinese Simplified.ini
[94968 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Chinese Traditional.ini
[94946 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Dansk.ini
[170666 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Deutsch.ini
[177162 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Espanol (Espana).ini
[178030 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Espanol (Latino).ini
[181984 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Estonian.ini
[160296 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Francais.ini
[182232 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Hebrew.ini
[164712 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Hellenic.ini
[179108 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Italiano.ini
[178944 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Japanese.ini
[111146 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Korean.ini
[105460 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Magyar.ini
[167030 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Nederlands.ini
[181074 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Norsk (Bokmal).ini
[168296 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Portugues.ini
[182564 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Suomeksi.ini
[85656 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Svenska.ini
[166490 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Thai.ini
[154892 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\Lang_Turkce.ini
[167474 Bytes] INI File - C:\Program Files\MessengerPlus! 3\Resources\MsgPlusRes.dll
[1721928 Bytes] DLL File - C:\Documents and Settings\[USER]\Cookies\index.dat
[32768 Bytes] DAT File - C:\Documents and Settings\[USER]\Cookies\virus demo@doubleclick[1].txt
[0 Bytes] TXT File - C:\Documents and Settings\[USER]\Cookies\virus demo@doubleclick[2].txt
[94 Bytes] TXT File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\index.dat
[98304 Bytes] DAT File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\expansion_embed[2].js
[44970 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\graphics[2].js
[6821 Bytes] JS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\icon_skins[1].gif
[1096 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\iehacks_ie7[1].css
[1902 Bytes] CSS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\internal[1].css
[16971 Bytes] CSS File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\jscommon[1].php
[135092 Bytes] PHP File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\0H2HIRKN\sidebar_bg[1].png
[501 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\bg_48a7db[1].png
[16755 Bytes] PNG File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\blank[1].gif
[49 Bytes] GIF File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\CAONTQJC.htm
[11711 Bytes] HTM File - C:\Documents and Settings\[USER]\Local Settings\Temporary Internet Files\Content.IE5\6XSRQLQP\icon_plus[1].gif
[1117 Bytes] GIF File
Additional information might be found here:
Search
at Google for
Adware MessengerPlus
Search at Bing for
Adware MessengerPlus
Search
at Yahoo for
Adware MessengerPlus
How can I protect myself from Adware MessengerPlus?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here

























