" » impFix - Remove the MSN virus!"

February 2nd, 2007

impFix - Remove the MSN virus!

Posted by Kelvin in Everything

*LATEST UPDATE*

Well, as expected, more viruses are here now, and undoubtedly, a new impFix is required…

Thanks to everyone who commented on the old one here - you rocked

Still, I thought it would be time for a brand new post, so you guys can comment, spam, and whatnot. Heh.

As usual, just run this tool, and watch the viruses get removed… No specific virus - just the really current ones - and some which anti-virus software can’t touch at all… Oh, yes, this removes those that impFix 2 can remove, too.

Click HERE to download impFix 3

Anyways, for those of you who’re looking at this for the very first time - you’re in good hands - no worries - look at the comments at the old post, - and then make the decision for yourself!

Once again, the features of impFix v3 are:

Remove EVERY MSN worm to date
Generically remove MSN worms hiding in specific places
Click and it shall fix. Bwahahahaha.
That’s about it - if it doesn’t fix the worm/virus you have - e-mail me at hot_wired13[at]hotmail.com and I’ll sort you out personally. That’s for sure.

If impFix has helped you, or your company, or your friends out - please drop Yandao.com some spare change that’s lying around in your pockets to support future development
	To say “thanks” - with a simple $5 donation - and we’ll thank you like crazy
	To tell us that “we rocked” - with 10 bucks - because we saved you that dreaded trip to the computer repair store where the only thing they do is make you pay several hundred bucks!
	..or, any amount will do - even a cent. HONEST! (come on, you have a few cents to spare, don’t you?)

**** Anything below this line is old, old news - Kept here so you guys won’t get lost! ****

Update Again: Tool has been updated to Version 2 to fix the latest ones posing as MySpace worms: http://yandao.com/files/impFix2.zip - don’t worry, the old link points to the new file too!

Update: Tool has been fixed for those who have been getting the C:\WINDOWS\system32\drivers\etc\HOSTS error. Re-download the tool and try again

Okay. Working through the night, and finishing at 2.26am, I came out with impFix for EVERYONE who has somehow got themselves infected by the IMProfile.net virus mentioned in the previous post HERE.

As mentioned earlier on, the virus causes your MSN/Windows Live Messenger to actually spam out LOADS of messages to everyone on your contact list, hence infecting them in return should they run the file from the website.

..and, as promised, here is a fix for the numerous who are affected:

Download link: http://yandao.com/files/impFix.zip

Basically, impFix removes the virus in question, thats it.

Have fun, and do post back if you like it, or if you encounter problems/issues with it!

686 Responses to ' impFix - Remove the MSN virus! '

Subscribe to comments with RSS or TrackBack to ' impFix - Remove the MSN virus! '.

justin` said,

on February 2nd, 2007 at 8:24 am

wow, that’s quite fast thx
April said,

on February 2nd, 2007 at 8:37 am

It fixed my lappy.. ;)… thank you
Lun said,

on February 2nd, 2007 at 8:56 am

Damnit kelvin I fuckingly love you THANKS!! I spend like 3 hours trying to remove it to no avail. And I was prepared to reformatt again (the 6th time this year)
But YOUR FIX KILLED IT!!
Kenshi said,

on February 2nd, 2007 at 9:02 am

Although i have no use of it, good job man, lol.
nongnong said,

on February 2nd, 2007 at 9:13 am

hey bro. U confirm can cure or not?. I use AVG oso quite successful lei. Haha. But anyway, thanks. 1 more weapon in my lappy
se said,

on February 2nd, 2007 at 9:26 am

hi, thks for ur program..but
i think mine is still not cure yet is there anything that i can do?
LiNg said,

on February 2nd, 2007 at 9:28 am

Thks It helped very much.
Kelvin said,

on February 2nd, 2007 at 9:28 am

nongnong: Yes, should be able, if it hasn’t “evolved” yet, or else tonight got to find a way to reverse engineer the code again. *Yawns*

se: Ah, what symptoms? Let me know.
hl said,

on February 2nd, 2007 at 9:31 am

thanks a lot. i think it works for my lappy. =)
se said,

on February 2nd, 2007 at 9:32 am

i think i d/l and opened the file so it kena my c:…:sad:
the ss : http://i95.photobucket.com/albums/l136/icYc0Ld/virus.jpg
will said,

on February 2nd, 2007 at 9:47 am

thanks alot! u safed mu lappy’s life
se said,

on February 2nd, 2007 at 9:48 am

eh…so wat do i do nw?
cendolcayang said,

on February 2nd, 2007 at 10:06 am

love it fast thanx
se said,

on February 2nd, 2007 at 10:19 am

hi…thks for ur help
i think i gonna reformat my com
but anyway u realli gd at com!
thks
Syilah said,

on February 2nd, 2007 at 10:57 am

Thankz!!That really helped.
Raymond said,

on February 2nd, 2007 at 11:11 am

Hey Thanks ALOT!!!:grin:
zy said,

on February 2nd, 2007 at 11:38 am

hoho finally. thanks alot
Kelvin said,

on February 2nd, 2007 at 11:45 am

se: ah, no need to format, just open up c:\windows\system32\drivers\etc\hosts that file in NOTEPAD and delete EVERYTHING except the line which says 127.0.0.1 localhost.

and its fixed
X said,

on February 2nd, 2007 at 11:45 am

The virus is gone but my lappy is so laggy… is it suppose to be like this?
Kelvin said,

on February 2nd, 2007 at 12:00 pm

X: probably other spyware got in. try your antivirus to scan and stuff? or maybe paste logs and stuff here?
se said,

on February 2nd, 2007 at 12:01 pm

eh..i dun get it can u make it clearer?
se said,

on February 2nd, 2007 at 12:13 pm

eh..sry but i cant open as access denied so wat to do nw?
se said,

on February 2nd, 2007 at 12:26 pm

kelvin thks !
i think its solved =)…
realli thks a lot
oo said,

on February 2nd, 2007 at 12:53 pm

hihi
Thank a lot.
I think, the virus is fixed.
hehe
Kelvin said,

on February 2nd, 2007 at 2:57 pm

se: I have updated the tool to fix that error you had. Have fun
se said,

on February 2nd, 2007 at 3:10 pm

thks!
flaw said,

on February 2nd, 2007 at 9:21 pm

hey thanks a lot for helping out everyone for free!
sky said,

on February 2nd, 2007 at 9:54 pm

thank you very much for the solution bro…i salute you…eh can teach me how you configure such solution…you rawks to the core.RP students really rawks! thanks a bunch…i really appreciate it.you should win an award or somehting man…:mrgreen:
Alvinbeo said,

on February 2nd, 2007 at 10:16 pm

Yo dude! Thanks a lot man! The problem’s fixed! Msconfig won’t disappear after a few seconds anymore. Thanks dude.

Without u, I would have formatted my com.

Thanks
douglas said,

on February 2nd, 2007 at 10:37 pm

hey man. u kinda saved my lappie’s too man. it was laggy like hell, and once i ran it, it was as fast as it was. thanks alot man. appreciate it. see you in qilah’s class soon. chill mate.
akenia said,

on February 2nd, 2007 at 10:40 pm

hahs. XD
mae said,

on February 2nd, 2007 at 10:55 pm

thx fr getting us the solution man..
Kelvin said,

on February 2nd, 2007 at 11:01 pm

se: welcome glad to be of help

flaw: ehhh, free? since when fixing needs money i always thought its done out of goodwill one? those shops who charge should be stoned, overcharge, i mean.

sky: hmm, frankly, i didn’t want to bother about making a fix, since alot of rumours that i *created* viruses. then again, i saw my gf got affected too, then realised there are plenty of good people who wasn’t part of those crappy critics. so i did a a little research through the night lor, and compiled it into a program

Alvinbeo: NP! i know its irritating when msconfig disappear. leaves u very helpless, cannot stand it. even tools such as Hijackthis also got closed. got me scared for a few minutes

douglas: it was laggy cos the virus was probably using MSN to spam your friends. do warn them, k? have fun with it otherwise. haha!

to everyone i missed out! THANKS for trying the tool out! and THANKS for commenting!
sweetie said,

on February 3rd, 2007 at 9:36 pm

it fixed mine! woohooo
serra said,

on February 3rd, 2007 at 9:58 pm

thanks for the help. mine is fixed
dy said,

on February 3rd, 2007 at 10:58 pm

THANKS suai(4) ge(1)
fan5hu said,

on February 3rd, 2007 at 11:17 pm

Hi. Thanks for the solution. Btw Im a TP student, amazed at ya program. But heard a new virus or rather a new version of it is out. Can U help to fix that one? It goes like this—-> didnt know you has an accout here, http://improfile.net/members.php?msn=xxx@hotmail.com. WHen u clink on it, A new webbie pops up.
please help. thanks..
Mfan said,

on February 3rd, 2007 at 11:56 pm

Thanks to your help.. you saved my life.. i mean my life saving as i just bought the laptop.. btw a TP student here.. thanks alot..
Lynette said,

on February 3rd, 2007 at 11:59 pm

KELVIN!!

omg, i dont know if mine’s cured! but anyway, thanks for helping!

P.S. haha erm, please find a solution to help me check if mine’s cured please!
kathRyn said,

on February 4th, 2007 at 12:00 am

hey hey hey..thanX alot k?
otherwise duno wad to do..my lappie is quite new…haaa u rawkZ lah..
chirst said,

on February 4th, 2007 at 12:05 am

hehe.. thanks.. at least till now seems okay liao..
jean said,

on February 4th, 2007 at 12:20 am

hey, wanna ask what if the status of that file bcome change, isit means it is alrite? i am scare to reformat com coz i got tons of things that are impt. hope to hear soon. =]
jean said,

on February 4th, 2007 at 12:21 am

i use avg to scan , & that is what they state . after using ur program… so is my com cure?
jean said,

on February 4th, 2007 at 12:33 am

& i also use the way that use ask se to do, by puttin it on notepad and deletin it until the line which says 127.0.0.1 localhost.
and the status on my avg said changed… aiyo, sorry to trouble you. hope to hear you soon
randomhearts said,

on February 4th, 2007 at 12:54 am

hey thanks kelvin.
your cure did help.
keep it up!!

=)
ahsie said,

on February 4th, 2007 at 1:09 am

thanks~ ^^
hope ITHelpdesk gives ya some credit if they use it nya~
jas said,

on February 4th, 2007 at 1:45 am

@ fan5hu…

I’m having that problem… can we use this fix as well?
Adrian said,

on February 4th, 2007 at 2:11 am

thanks so mcuh! I hope it works. it’s been bothering me soo much
Kelvin said,

on February 4th, 2007 at 2:18 am

sweetie & serra: welcome! have fun with it now. dont forget to come back here!

dy: lao xiong, what makes you even think i fit your han yu pin yin description? u might be spot on, or miles away. hahaa.

fan5hu: yup, there is 1 spreading, but it will die soon. authorities have been contacted to take down the server hosting that page (improfile.net). less of your friends infected already right? because i think the datacenter has taken that page down.

Mfan: wow. since when did the link spread to TP? anyways, have fun lol! spread e website abit abit!

Lynette: haha! will find a way to get that done! you have your dinner at peculiar hours, or is that supper?

kathRyn: come to think of it, new or old laptop (or even antique), once infected, poses a problem. Hmmmm.

jean: yup, its okay. changed because its clearing the windows HOSTS file since the virus infects it either way it still works

randomhearts: thanks for the support! appreciated much!

ahsie: haha. they give credit? abit unlikely. maybe stanley, but i don’t know the rest =x

jas: [yes i know u're asking fan5hu] errr, if it doesn’t work, contact me on MSN? i’m interested in knowing more about the new variant leh..
Kelvin said,

on February 4th, 2007 at 2:20 am

Adrian: to check if it works, go to Start > Run > msconfig
then press enter. a box should come up, if the box doesn’t close automatically after like 1 minute, it worked!
michelle said,

on February 4th, 2007 at 2:23 am

thanks! =]:mrgreen:
Dani said,

on February 4th, 2007 at 2:34 am

Hey, thanks i think it worked
Webster said,

on February 4th, 2007 at 2:54 am

Fixed it, thanks alot
navvir pasricha said,

on February 4th, 2007 at 3:04 am

hey i dowloaded the file yet it didnt work. it says compressed (zipped) folder is invalid or corrupted..

now am i jst really really stupid or am i missing something?
Kelvin said,

on February 4th, 2007 at 3:09 am

navvir pasricha: hmm. maybe your internet provider’s connection’s messed up the files a little. try this: http://yandao.com/files/impFix.exe
navvir pasricha said,

on February 4th, 2007 at 3:11 am

one more thing, i dont have a hosts file in the windows directory u mentioned. i have lmhosts, networks, protocol and services..

any suggestions? oh n i dunno if it matters but ive compressed my C drive..

thanks alot son
ShiR said,

on February 4th, 2007 at 4:05 am

Hey,
thanks for the program!!!!
I think the virus is clear…think so lar…
I also duno go where check…but at least now my laptop does not have any problem. hhahaah..
THANKS!!!!
L'angelo said,

on February 4th, 2007 at 8:54 am

Hey there,
Many thanx to u for the program u’ve created .. The virus is clear now after giving me a whole lot of problem.. Salutes to u dude! U rawkz!!
jas said,

on February 4th, 2007 at 9:34 am

i think it’s done…. will inform you again if anything goes wrong… Thanks!!!
gecko said,

on February 4th, 2007 at 10:27 am

OMG I REALLY REALLY AM INDEBTED TO YOU. You are saving humanity with your impFix! *claps* Thank you sososo much!

I think it worked cos my msconfig didn’t die on me YAY for you!

(I shall not click on random links. Never again.)
navvir pasricha said,

on February 4th, 2007 at 12:00 pm

yo kelvin thanks alot son.. ur program killed the mofo off.

thanks again
Shee said,

on February 4th, 2007 at 7:57 pm

thank you!
yuxuan said,

on February 4th, 2007 at 8:52 pm

hey i think it worked. but how do u know if ur computer is cured?
jin said,

on February 4th, 2007 at 9:15 pm

hey, thanks dude, u saved my life. the freaking bug was damn irrtating. haa, thank you so much! now my msconfig works too so yeahh. thanks soso much
Kelvin said,

on February 4th, 2007 at 10:08 pm

navvir pasricha: yo. my program auto creates a new hosts file (when u close it), so it should fix the problem and no, compression doesn’t matter - the hosts file is used for “forced” network resolving (aka, hardcoded)

Shee:

yuxuan: Start > Run > type inside: msconfig. then press enter. see if the thing stays open. if it suddenly closes, u’re still infected. then tell me if its messed up

jin: wahahaha. have fun lol! msconfig rox (but other progs rox too, such as http://yandao.com/files/wtfIshThis.exe - modified hijackthis program)
Kelvin said,

on February 4th, 2007 at 10:09 pm

L’angelo & jas: have fun!

ShiR: “Start > Run > type inside: msconfig. then press enter. see if the thing stays open. if it suddenly closes, u’re still infected. then tell me if its messed up” Try this!
LetitiA said,

on February 4th, 2007 at 11:30 pm

THANKS DUDE! =))
i love you said,

on February 5th, 2007 at 1:11 am

Are you jesus? i love you
Melinda said,

on February 5th, 2007 at 1:19 am

thankyouthankyouthankyouthankyou– hopefully you’ll always use your powers for good
ozy said,

on February 5th, 2007 at 6:40 am

when i click the impfix, this happens ‘component ‘MSCOMCTL.OCX’ or one of its dependencies not correctly registered : a file is missing or invalid’ so what do i do now?
XkaOnslaught said,

on February 5th, 2007 at 8:34 am

YOU SIR, WIN AN INTERNET.
Kelvin said,

on February 5th, 2007 at 12:52 pm

ozy: refer to the directions at http://www.ascentive.com/support/new/support_dll.phtml?dllname=MSCOMCTL.OCX to fix that mscomctl.ocx error
Jin said,

on February 5th, 2007 at 7:06 pm

haha are you like the smartest guy on the internet haha.
Stevenliew said,

on February 5th, 2007 at 7:33 pm

IS my comp screwed up???
I tink the trojan infected the whole ocmp liao…now I swtich off comp the comp will stop at a blank page wih my cursors……
then it stop processing to shut down and I hav to shut down mauually
aa said,

on February 5th, 2007 at 8:53 pm

Woah! Thank You! Fixed my com!:grin::grin::grin:

But it left out svchosts.exe, I had to remove that manually. At least your fix allowed regedit to work again!
ozy said,

on February 5th, 2007 at 10:13 pm

THANKS MAN!!!!
ozy said,

on February 5th, 2007 at 11:16 pm

erm. after using the tool, the msconfig doesnt go off. but when i switched to safe mode, i scanned using avg and adaware, there were still trojans and spywares from the rofl@you. isit alright?
Kelvin said,

on February 5th, 2007 at 11:20 pm

Jin: there are smarter people, nobody is the smartest learning never stops. =)

Stevenliew: Hmm. Its infected, but i don’t think its screwed up. msg me over msn? hot_wired13 at hotmail.com? i’ll try to sort you out

aa: uh oh. i think svchosts.exe is the new variant. shit. not good.

ozy: yup, use other antivirus to clear them. mine is the preliminary one, to make antivirus and stuff work
ozy said,

on February 5th, 2007 at 11:27 pm

ROCK ON!
se said,

on February 6th, 2007 at 1:50 pm

hi kelvin its me again
can u to take a look at this : http://i95.photobucket.com/albums/l136/icYc0Ld/see.jpg
is this a virus? as some of the program jus appear suddenly but the anti virus did not detect it…
thks
rachh said,

on February 6th, 2007 at 10:15 pm

hello kelvin.sort of need your help.:smile:
erm.there’s this sort of new virus again i think.i forgot the link.its has something to do with “i have found this photo blah blah blah.i’m sure that is you!dunno on the left or on the right.”something like that.how do i remove the virus?or maybe you can add me at rachh_02@hotmail.com and tell me the solution!

many thks to you!
*rachh
Crystal said,

on February 7th, 2007 at 12:44 am

it fixed the lag & everythin thx a lot..:smile:
Kelvin said,

on February 7th, 2007 at 6:38 pm

se: nah, those are just hidden files - they’re okay

rachh: hmmm. this program doesn’t work to remove it? i’ve added you already drop me a msg, otherwise i wouldn’t know its you. thanks

Crystal: welcome
trep said,

on February 7th, 2007 at 9:36 pm

wow! it got rid of that virus fast! haha.. thx!
Jin said,

on February 7th, 2007 at 9:46 pm

hhaa, im really extremly thankful for your work. haha. i just got spyware from a music hosting site, and i cleared it, only thing is, i dont know whether im safe now. anyway to ensure?
Zheb54 said,

on February 8th, 2007 at 12:58 am

Let’s hope it worked.
Selvi said,

on February 8th, 2007 at 1:15 am

well… i’m not really sure if the virus has been removed or not, but hope so lah..!!! hahahaa.. thx..
Rummy said,

on February 8th, 2007 at 1:36 am

I wasn’t silly enough to click the link(well i was, the other day at uni, but when it popped up a thing about running a file, I got weary) and I just got about 3 more links of it now at home. Admittedly, I did then click one out of curiousity but avast! seemed to pick it up before it got a chance, even so I ran the ImpFix but it didn’t seem to pick anything up, and my friends have said that I’m clean.

Either way, I have to say, it’s very awesome of you to put this fix out there for everyone Kelvin, and it’s helping me sort out those chumps are too silly to not click links, or to look on the internet for info, so thank you very very much!
q said,

on February 8th, 2007 at 1:39 am

thank you! u rock Kelvin!
Anonymous said,

on February 8th, 2007 at 1:48 am

it works…..thanks
No one said,

on February 8th, 2007 at 2:04 am

I have a window saying ‘Component MSCOMCTL.OCX or one of its dependancies not correctly registered: a file is missing or invalid’.
Erm… Help me please?
me said,

on February 8th, 2007 at 2:57 am

yo thanks man:grin:
dwergs (Mess.be) said,

on February 8th, 2007 at 4:23 am

Thanks Kelvin and good job!

I posted & mirrored it at http://www.mess.be
mike said,

on February 8th, 2007 at 5:37 am

so i got a message very similar to what everyone was talking about except mine didn’t say rolf or hope this isn’t you, but rather emo… and the the website. I was looking forward to laughing at emo kids but instead got messages from people asking what I sent them. The fix says it got rid of the program though so I hope it actually worked.

thanks
Lee said,

on February 8th, 2007 at 7:05 am

wonder software. thx
Paul said,

on February 8th, 2007 at 8:10 am

1001 thanks
Keon said,

on February 8th, 2007 at 1:03 pm

Hey Kelvin. I have linked this post on my blog.
Thanks for the fix!
How to remove the IMProfile.net virus at Fanatic Live said,

on February 8th, 2007 at 4:59 pm

[...] has created a tool called impFix to remove the virus, so give it a try if you believe to be infected with this [...]
iVy said,

on February 8th, 2007 at 8:46 pm

hey!!thanx man.. ;PpP
suan said,

on February 8th, 2007 at 9:50 pm

hey, thanks alot. i hope the infection is gone. (: now i can go msn. haha.
jac said,

on February 9th, 2007 at 1:10 am

u saved my laptop! thanks!
JimBo said,

on February 9th, 2007 at 2:47 am

LoL, Im definilty not the most technically agile individual, and I was a victim of this stoopid virus lol, but when I try to download and run your fix this is the message prompt I get:

Component ‘MSCOMCTL.OCX’ or one of its dependencies not correctly registered: a file is missing or invalid

Help Please…?
Ryan said,

on February 9th, 2007 at 3:43 am

thanks for the tool Kelvin. i was hoping you could tell me what process keeps running on startup. the computers i have that were infected had the hosts file automatically get switched to a system file and appended with all the extra code. even after deleting the hosts files and copying a known good file from another computer it would overwrite them.

if you could let me know the process name that was running it, that would be greatly appreciated
Uncle you know who said,

on February 9th, 2007 at 8:49 am

Congrats Kelvin, looks like you saved alot of people alot of hassle
Kelvin said,

on February 9th, 2007 at 9:19 am

Selvi: you can try the above method also

Rummy: heh, thank goodness u didnt run the link. else it would have gotten messy :)either ways, antivirus can’t update fast enough to block such stuff, though. glad u liked the program man, and yes, 1-click stuff works good for everyone

q, Anonymous, me: np! stay safe lol.

No one: http://www.pcalmeglio.com/winoverboost/faq_en.htm#faq2 follow thgis page fo fix that error

dwergs (Mess.be): rock on man, nice site you’ve got thanks again mate.

mike: yea, they can put all kinds of shit as messages. the buggers. argh. oh well. glad it worked for u man.

Lee: heh. i try.

Paul: what about 1002? where do i find that?

Keon: thanks for the link/pingback man. appreciated

iVy: hoped it worked for you!

suan: should be gone! try ur msn, shouldnt be so laggy anymore

jac: awww sure!

JimBo: http://www.pcalmeglio.com/winoverboost/faq_en.htm#faq2 follow thgis page fo fix that error <– as stated above

Ryan: you might wish to google for HijackThis (or use a modified version at http://yandao.com/files/wtfIsThis.exe ) for process names. this virus uses randomized folder names, and can’t be usually killed i wrote a method for detection

Uncle you know who: wow, how did you stumble here.lol
Kelvin said,

on February 9th, 2007 at 10:37 am

Selvi: you can try the above method also

Rummy: heh, thank goodness u didnt run the link. else it would have gotten messy :)either ways, antivirus can’t update fast enough to block such stuff, though. glad u liked the program man, and yes, 1-click stuff works good for everyone

q, Anonymous, me: np! stay safe lol.

No one: http://www.pcalmeglio.com/winoverboost/faq_en.htm#faq2 follow thgis page fo fix that error

dwergs (Mess.be): rock on man, nice site you’ve got thanks again mate.

mike: yea, they can put all kinds of shit as messages. the buggers. argh. oh well. glad it worked for u man.

Lee: heh. i try.

Paul: what about 1002? where do i find that?

Keon: thanks for the link/pingback man. appreciated

iVy: hoped it worked for you!

suan: should be gone! try ur msn, shouldnt be so laggy anymore

jac: awww sure!

JimBo: http://www.pcalmeglio.com/winoverboost/faq_en.htm#faq2 follow this page fo fix that error - as stated above

Ryan: you might wish to google for HijackThis (or use a modified version at http://yandao.com/files/wtfIsThis.exe ) for process names. this virus uses randomized folder names, and can’t be usually killed i wrote a method for detection

Uncle you know who: wow, how did you stumble here.lol
Pandapig said,

on February 9th, 2007 at 11:51 am

thanks.. it works.. no problem so far
kenshi said,

on February 9th, 2007 at 2:18 pm

grats on getting “listed” man, lol.
wen said,

on February 9th, 2007 at 2:37 pm

there’s something wrong with my msn too and i don’t know the exact problem. i thought this helps so i tried, but it doesn’t remove that virus from my msn.

i got that virus via a link sent by my friend via msn and its a site which ended with .php, and when downloaded its a msdos file. the caption was something like “i saw your picture online” “spot your face”. after that, it auto prompts my msn contacts with that link and caption. my keyboard and mouse seemed to become locked too and i had to reboot my com to stop that nonsense. other than msn, other programmes are running normally.

will be thankful if you could help. thanks. (:
ArUGan said,

on February 9th, 2007 at 3:39 pm

Kevin thank u , no more virus in my lap thanks alot U are great .keep up great work .:smile:
Australia » Blog Archive » Happy Feet, I’ve got those Happy Feet! said,

on February 9th, 2007 at 3:47 pm

[...] has created a tool called impFix to remove the virus, so give it a try if you believe to be infected with this [...]
Australia » Blog Archive » Greece travel - Greece Travel said,

on February 9th, 2007 at 3:48 pm

[...] has created a tool called impFix to remove the virus, so give it a try if you believe to be infected with this [...]
Wyn said,

on February 10th, 2007 at 12:04 am

THANKS SOOOOO MUCH!!!!!!!!!!!!!!!
june said,

on February 10th, 2007 at 1:20 pm

THX LOT!!:grin:
abc said,

on February 10th, 2007 at 3:38 pm

hey, i saw got this link from a friend since i kena the virus oso. not sure if it worked or not, but good job on making it^^
ash said,

on February 11th, 2007 at 3:05 am

How do i kow if it worked?
kat said,

on February 11th, 2007 at 3:31 am

hey, i hope this worked but im not sure, i think i found some things caused by it:
1. an icon called ‘install’ keeps re appearing on my desktop
2. my homepage changes

i used the program to get rid of it, and hopefully it worked but the icon is still on my desktop, any advice kelvin?
Kelvin said,

on February 11th, 2007 at 4:03 am

kenshi: thanks bro!

wen and kat: run http://yandao.com/files/wtfIsThis.exe and choose scan with logs and send the log file it produces to my email, hot_wired13 [at] hotmail [dot] com. i’ll see what i can do

ash: your friends stop complaing that u’re sending viruses to em hehehe.

ArUGan, Wyn, and june: thanks for your support
kat said,

on February 11th, 2007 at 4:14 am

hey kelvin
till now (About an hour later) i havent sent anything, the icon which i deleted hasnt reappeared, hopefully it wont, if it does ill follow your instructions on how to further ‘investigate’ the evil virus, but till now it seems to have died.
thanks sooo much! your a real genious and life saver for creating this msn-virus-be-gone!
yay said,

on February 11th, 2007 at 4:17 pm

wow. thx! that’s fast.
chunli said,

on February 11th, 2007 at 5:15 pm

i got infected by this malicious spyware too… i used ur program to remove it… but i am nt sure if i had done it… is there a way to check it?? just hope that the person who sent this fucking spyware got punished!
bryen said,

on February 12th, 2007 at 9:46 am

dude good job, I posted it for a friend hopeflly it works for her
AGratefulUser said,

on February 12th, 2007 at 2:24 pm

Thanks a tonne, you saved my bacon, big time.

Have a nice wedding!
internet said,

on February 12th, 2007 at 4:50 pm

thanks dude.
skater matt said,

on February 12th, 2007 at 8:49 pm

it worked great
Kelvin said,

on February 12th, 2007 at 10:02 pm

kat: no problem have fun with it!

chunli: yes, see above, there’s a post somewhere about checking using msconfig to see if it stays open..

AGratefulUser: ehhh, the wedding thingy was a joke read the dates carefully. LOL

skater matt & internet: np! have fun!
jose smits said,

on February 13th, 2007 at 3:04 am

thank you thank you thank you,youre the best
greetings from the netherlands
Jess said,

on February 13th, 2007 at 6:51 am

THANK YOU SO MUCH!!!
Beth Fuller said,

on February 13th, 2007 at 10:33 am

Thanks so much for the fix! I’m so dumb for clicking it and nothing else has worked! : ) Thanks again!
pf said,

on February 13th, 2007 at 11:28 am

thank you sirs
Jonas said,

on February 13th, 2007 at 11:46 am

Hello

Please change the big picture download link to just a text link? Should improve google searching.
And i didnt see it for 20 sec cos i autómatically ignore big ad like pics like that
Oh, and also add samples of what sites it links to so people can find it thru google aswell.
Or, i can do it:

Fix MSN virus:
http://s5.improfile.net /members.php
http://www51.emoprofile.net /emo.php
Kelvin said,

on February 13th, 2007 at 12:40 pm

jose smits: thanks man. wooo i got some old pals in the NL the old days in the warez scene. *grins*

Jess & pf: no prob have fun now lol!

Beth Fuller: ehhh, just remember never to trust friend links again, ask them what is it about lol.

Jonas: I added a text link below, yea, i know some people block such add blocks oh, btw, this fixes MORE than just those, it fixes any improfile virus which.. lets just say, the creator dumbly forgot to change something
Blitz said,

on February 14th, 2007 at 12:32 am

Hi Kelvin, just wondering how to know wat virus infected my MSN? cause if its Improfile(or some soft) then i d/l ur Impfix and run it, it should solve right? But my MSN still having the same virus.
Some of the problem i face: can’t even open the Windows Live Messenger window for 2 secs before the email address log in drop down button goes crazy. The mouse cursor won’t move too. I tried pressing Ctrl+Alt+Delete, and it does show at the icons section of the tool bar, but the Task Manager won’t appear. and I’ve uninstalled Windows Live Messenger from my computer. Tried downloading and re-installing Windows Live Messenger but the problems are still there.
Blitz said,

on February 14th, 2007 at 1:38 am

the virus disguise as a sent message saying something like { i saw your retarded picture on this website http://www.wellwell.biz} once u click on the link, the file auto download and the windows messenger is infected. then it will spread the same link to the others messenger account which is available online. please help me to solve this problems. it’s slowing down computer speed
Q said,

on February 14th, 2007 at 2:52 am

I had the same problem with the “retarded pic” thing… -_-

Neeways just wanna say a “WOW” to your wonderful little thingie and a big THANK YOU! : ) So glad it doesn’t take me long to get it fixed… time for some sleep!!!
Blitz said,

on February 14th, 2007 at 5:02 am

Q: how u fixed? using that Impfix? i use that but it dint work =’(
r. said,

on February 14th, 2007 at 6:48 am

thanks it works!!
hamza said,

on February 14th, 2007 at 3:07 pm

thank you
Blitz said,

on February 14th, 2007 at 5:18 pm

Heeey! I found your retarded face online haha :$ , this is you right? :-O http://www.wellwell.biz/pictures_/archive/6a4if9/pic_dl.php

This is the Virus link that infectec my MSN, and i cant get rid of it using ImpFix plzz help
lol said,

on February 14th, 2007 at 8:29 pm

hw? y my msn still hav the virus??? help mi plzzzz!!!
Kelvin said,

on February 14th, 2007 at 11:25 pm

Blitz, lol, and everyone else who has the wellwell.biz/epitomebot.com virus/worm: working on it. give me awhile. unless someone wants to let me remote in to look at it tell me on msn hot_wired13 [at] hotmail [dot] com
thank said,

on February 14th, 2007 at 11:37 pm

thanks! i hope it works! do i need to do anything? it’s like so fast.
Blitz said,

on February 15th, 2007 at 12:30 am

Kelvin: i cant log on MSN lol, if i i sign it the virus will pop, and i cant control my mouse/keyboard =(
Blitz said,

on February 15th, 2007 at 12:31 am

Oh and thanks for the effort for helping us out^^
Ed said,

on February 15th, 2007 at 3:12 am

thx alot……
but im still paranoid bout the virus…
XkaOnslaught said,

on February 15th, 2007 at 11:24 am

it seems like another one is running rampant using this MSN spammage:

http://www11.ratemynuts.net/view.php?msn=anerakaphobia@hotmail.com

no brainer its another virus…
hi ~ said,

on February 16th, 2007 at 1:50 am

thanks lots .
JB said,

on February 16th, 2007 at 3:29 am

Jesus Christ I have tried everything. I have not restarted yet but I can run programs and go to websites that I usually were stopped by this fucking virus. YOUR THE MAN! Keep it up!
Ochin said,

on February 17th, 2007 at 12:31 am

Thx a lot:razz:
Kelvin said,

on February 17th, 2007 at 4:09 am

Blitz: run the http://yandao.com/files/wtfIshThis.exe program and select to remove anything strangely named, including the one which says “Audio Driver” - that’s your virus.
Blitz said,

on February 17th, 2007 at 1:47 pm

woahh~ its work =D thanks so much of ya effort ^^ ty
hf said,

on February 17th, 2007 at 3:31 pm

thanks! it worked!
marnnoi said,

on February 18th, 2007 at 1:40 pm

Thanks a lot
chengjiang said,

on February 18th, 2007 at 2:11 pm

thanks for your great help
marnnoi said,

on February 19th, 2007 at 1:57 am
:) said,

on February 21st, 2007 at 1:20 am

Hi kelvin, may i know is there a solution other than using the wtfishthis.exe program for the virus which is something like

“Heeey! I found your retarded face online haha :$ , this is you right? :-O http://www.wellwell.biz/pictures_/archive/6a4if9/pic_dl.php”

?

Thanks lots.
Jon said,

on February 21st, 2007 at 7:04 am

erm kelvin i recently got a msg popped up in a convo saying
my email addreess then a link before it saying www11.ratemynuts.com/myemail
Can u plz help me
what shud i use of this site to get rid of it plz help dude
Dion said,

on February 21st, 2007 at 9:33 am

Thank kelvin for the ‘retard face virus’ soution!!! thank alot!!!!:grin:
Kelvin said,

on February 21st, 2007 at 11:02 am

- currently, the easiest solution is to, use the wtfIshThis (http://yandao.com/files/wtfIshThis.exe) program, scan and save a log, and e-mail to me at hot_wired13 [at] hotmail [dot] com. the viruses keep changing everyday!

Jon: do what i mentioned to the guy above this line. and send me the files i’ll see what i can do
Colin said,

on February 22nd, 2007 at 6:10 am

Top fix great job
Thanks a bunch
Anonymous said,

on February 22nd, 2007 at 2:31 pm

i noe u com pro can help mi !!! y my com keep autoshut down T_T:sad::sad:
Anonymous said,

on February 22nd, 2007 at 6:52 pm

:shock::razz:
jen said,

on February 22nd, 2007 at 9:53 pm

Dude…i don’t know how many times i’ve thanked you already, but thanks man…and for all the trouble as well…..we got a nice guy here people!!!!!

jen
han said,

on February 23rd, 2007 at 12:20 am

hey kel, d bloody pop-ups are stil ‘popping out’. its seriousli getting to me. i hv tried the impfix tingy but it doesnt seem to be working. WTF shuld i do???but ur effort are deeply appreciated tho. kudos to u man.
Michael said,

on February 23rd, 2007 at 10:28 pm

I need help, does your program fix this viruz thing i have on messenger:

“WOW check +o( +o( http://www.latoni.com/images/saddam_hanging_naked.php brb ok? ”

It doesnt let me do anything, and I already unistalled msger and downloaded it again, and still
marnnoi said,

on February 23rd, 2007 at 10:37 pm

thz
Michael said,

on February 23rd, 2007 at 10:49 pm

UMM the IMPfix thing isint helping, maybe idk how to use it?.. i press the button and it says maybe its fixed and thats it?.. umm the problem is still there…
Michael said,

on February 24th, 2007 at 12:23 am

THNK U KELVIN.. u have given back my life LMAO !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
alex said,

on February 24th, 2007 at 2:34 am

thank you kelvin, you have been a great help to me.
FYI( readers ) this amazing genius and friendly guy just help me fix another msn virus!
THANK YOU
Justin said,

on February 24th, 2007 at 3:36 am

Hi there, Im having the exact same problem as Michael. Ive sent you the logfile. Please help me, I have no other solutions left..
Justin said,

on February 25th, 2007 at 2:12 pm

Thank you so much for helping me!! Really appreciated. Keep up your good works and good deeds! =)) Once Again, THANKS!
baoyi said,

on February 25th, 2007 at 2:38 pm

hi! i’m having the same problem as Michael that i have the same virus which totally causes my MSN/Windows Live Messenger to actually spam out LOADS of messages to all my friends who are online. i’m feel so foolish as i have accept that thing which i didn’t know that is virus at first. i wanna try to solve it but i couldn’t help it. so pls help me with this problems.
baoyi said,

on February 25th, 2007 at 2:50 pm

“WOW check +o( +o( http://www.latoni.com/images/saddam_hanging_naked.php brb ok? ”

this is the virus which is totally hack my account. so pls send me a reply and help me. and i really dun know if my friends have accept it. but anyway plz help me to solve this problem.
Kelvin said,

on February 26th, 2007 at 12:44 am

baoyi… check ur email. replied u with a fix already, try it out. worked for everyone above!
baoyi said,

on February 26th, 2007 at 6:47 am

kelvin……….
a million thkz to you…………..
pacific said,

on March 1st, 2007 at 12:34 pm

Hi Kelvin,

I had the same problem (ie. captain mnemo & winlogon). Ran your fix, and the problem is gone. Thanks.
But … when I run spy sweeper, it still says the spywares are there, although I don’t see any more “symptions”. What should I do ?
pacific said,

on March 1st, 2007 at 2:31 pm

My email, which I didn’t include earlier. Thanks for your help. I think you’re a genius.
June said,

on March 2nd, 2007 at 2:35 am

Hi I had the same spam message as the guys above, the saddam one but I thought I fixed since after I reinstalled it stopped appearing. But now I got hit by another message! This is the message I get:
WOW CHECK! :-O http://tinyurl.com/236tww/bush_spot_naked_in_whitehouse.php YUCS! +o(
Hopefully you can help me to get rid of it? I really dont know how did I get the virus as I dont remember clicking on any links.
AHHH HELP!!!!!! said,

on March 3rd, 2007 at 6:26 pm

AHHHH HELP GUYS!!!! I USED IMPFIX YESTERDAY AND IT WORKED FOR1 DAY!!! TODAY IT CAME BACK!!!! I THINK NEW VIRUS!!! its reads George_bush_naked.pif pls help me yandao =(
sarah said,

on March 6th, 2007 at 11:08 pm

please can you help me!!!!i have the virus which says; hey,check this out. i have tried all ways to get rid of it can you please help me?
xx
Kelvin said,

on March 7th, 2007 at 2:17 am

June: fixed yours through email.
same with pacific, i think

AHHH HELP!!!!!!: resolved

sarah: tried e-mailing you - invalid email address. care to drop me a mail at hot_wired13 [at] hotmail.com? thanks.
pacific said,

on March 7th, 2007 at 2:59 pm

Hi Kelvin,

Did you send me an email ? Did not receive any.:neutral:
sage said,

on March 7th, 2007 at 10:26 pm

how do i know if its worked? it just popped up saying it was fixed, but it took no time at all
TC said,

on March 8th, 2007 at 3:35 am

some similar message came up on my windows live messenger, saying “holy shit youve got to see this”with a link following. i clicked on the link thinking it was my friend posting something. the website didnt load up and some error message came up. also, i own a mac. i was wondering, is this virus likely to have affected my computer?
Mary said,

on March 8th, 2007 at 11:22 am

thanks so much
Dolores said,

on March 8th, 2007 at 3:25 pm

I got a message from someone on my MSN saying lol check out the contact list for and listed my email addy.. I didnt open it but it still went through my contact list. I download and used your fix.. hope it works from my problem .. Thanks so much::smile:
Infected said,

on March 11th, 2007 at 2:48 pm

I got the virus - HEEY CHECK YOUR FACE HAHAHAHA , HAHAHAHHAHA ITS TO FUNNY :D http://www.youaretheenemy.com/gallery/PLEMAXRKWQDO.php

is there any way to fix it?
Rocky said,

on March 13th, 2007 at 11:18 am

thank you soo much! i nearly had a heart attack, i thought i killed my laptop.
wEnhAo said,

on March 14th, 2007 at 1:08 pm

xie xie ni!!!! XDD!!
Slacker said,

on March 14th, 2007 at 2:31 pm

I thought I had already fixed the “ratemynuts.net” problem using CCleaner as well as manually removing the prefetch files that it installed… 24 hours later it was back and my MSN started to spaz and kept opening contact cards from my contact list… I’m crossing my fingers that this will take care of this once and for all…

Thanks for simple fix??? (sorry for the skepticism but impFix seems too good to be true, way too easy :shock:)
katie said,

on March 15th, 2007 at 5:24 am

i had a message come up on msn and i didnt click on anything i think the website was something like http://www.hotmodels.com or something saying to click on it to it and see a photo of yourself there, then it went mad and sent it to all my contacts, i can’t go back on msn and i have had to remove the whole windows live messenger. Noone is happy with me thanks to this i think it may be a virus
please could someone help me?
Kelvin said,

on March 15th, 2007 at 5:51 am

sage and TC: you’ll know if your computer gets messed up from the MSN messages which gets sent out - your friends will tell you!

Infected and Katie: download and run http://yandao.com/files/wtfIshThis.exe and choose Scan and Save Log and e-mail me the log file at hot_wired13 [at] hotmail [dot] com. i’ll take a look and see what i can do

Slacker: well, anything pops up so far?
Slacker said,

on March 15th, 2007 at 2:48 pm

Dude, I think it really worked!!!

Thank you so much!!! You’re the man Kelvin!!!

The best thing about your fix is I didn’t have to copy and paste any confusing log files, didn’t have to go in and delete any registry files, didn’t have to wait 30 minutes for a full system scan to tell me nothing was found, didn’t have to run a spy ware program that tells me that my other spy ware programs are spy ware and need to be deleted, and I didn’t have to call India to get tech support…

Thanks again…
187 said,

on March 16th, 2007 at 7:46 am

cheers, you are God-like
Turpinator said,

on March 16th, 2007 at 8:11 am

so ive been helping my friends with this virus, thanks for the help btw, and ive gotten a new one that is im-profile.com/…… i sent your program to my friend and they said they still had it after they ran it, so does your program work for all of those virus thingies? thanks
please help said,

on March 16th, 2007 at 8:13 am

I clicked on the link when i got the msn message and I ran it. How do I know if I got the virus, or how can I be sure that it was remove by impfix? I have a couple smss.exe files on my computer. Is this the virus?

Thanks,
K
Justin said,

on March 16th, 2007 at 8:32 am

Yeah, wondering the same as the last guy. How do you know you got it and how do you know its gone? I clicked link but never opened file. I ran that little thing you made anyway.
From the positive feedback I’ve seen about it, thanks a ton if I in fact got it and if it in fact got deleted.
Christoph said,

on March 16th, 2007 at 8:53 am

*quote*
Michael said,
on February 23rd, 2007 at 10:49 pm
UMM the IMPfix thing isint helping, maybe idk how to use it?.. i press the button and it says maybe its fixed and thats it?.. umm the problem is still there…

*quote*

same problem, u musta emailed him or somthing… please help me. I have a 4 page essay that destermines if i graduate or not due tomarrow. :cry::???:
Sehl said,

on March 16th, 2007 at 9:17 am

Woot, I’m Cured, Thanks for the fix.
lyn said,

on March 16th, 2007 at 9:31 am

i think it worked.. thanks so much!!! =)
Joel L. said,

on March 16th, 2007 at 11:12 am

Dude, I have no idea if this worked, but if it did, I thnak ou. I thank you soooo much. But if it didn’t, I appreciate you trying m8. Good job anyways.

-Joel
b*stard_virus said,

on March 17th, 2007 at 4:40 am

I have used your fix. Many thanks for that.
However when do an ipconfig /displaydns all the entries that were removed from the hosts file, still exist in teh ‘resolver cache’?!?!

so all the anti virus sites are still unavailable. Ive disabled dns through services restarted, flushdns but still it points zonelabs etc at 1.1.1.1.

tried spybot too. the time to life or watever it is is at 604 000 secs thats a month or so. Is there any other way to resolve teh dns issue?
Marco said,

on March 17th, 2007 at 5:07 am

There’s a new version of this virus that I retardedly got infected with T_T

Infected from a similar name so I would have to assume they’re related, I got it from a message “http://www18.im-profile.com/member.php?msn=YOUREMAILHERE” First virus I’ve ever gotten >_
Marco said,

on March 17th, 2007 at 5:08 am

If it helps it does close hijackthis and anything even related to it… every time. sorry to double post :\
Ichiroga said,

on March 17th, 2007 at 5:58 am

Thanks, not sure if I had it, but I don’t now.
anyone else notice that when you go to just normal im-profile.com it’s redirecting to a weird political site thing…. http://www.pardontheagents.com?
b*stard_virus said,

on March 17th, 2007 at 6:47 am

Marco mine was something like yours. It was my bro who did it.

im guessing no one knows how to fix the new variant of this bullsh*t virus then. I know these guys hate billy, but the whole world uses billy. GET OVER IT.

Anyway enuf of the rant. if anyone could help me it would be much appreciated.
Marco said,

on March 17th, 2007 at 7:33 am

Thank god, The fix already posted works from viruses recieved from http://www.im-profile.com or at least it worked for me.

I love you for helping me through my first virus, and ignore me email :)!
Max said,

on March 17th, 2007 at 10:46 am

thanx a lot, i was workin wiht Marco, i think he got the virus from me… O_o
Kelvin said,

on March 17th, 2007 at 7:21 pm

firstly, everyone. yo. thanks for commenting - i was away at camp hence the delayed replies - i hope its not too late.

“please help”, Justin: hey, u’ll know if its cured by the fact that your msn stops spamming your msn and if its no longer being irritating to your computer. to be safe, i can read through your HijackThis/wtfIshThis logs (download and run http://yandao.com/files/wtfIshThis.exe and Scan and Save log and send em to me at hot_wired13 [at] hotmail [dot] com). i’ll reply as soon as i get it.

Christoph: hmm. i hope im not too late. i didnt get your email christoph?

Joel L.: let me know how it goes, if its not fixed yet, drop me another comment or e-mail

b*stard_virus: omg. HONESTLY, i never knew the ipconfig /displaydns command existed - maybe im too lazy to play with microsoft’s command line stuff. anyways. try ipconfig /flushdns - should clear the cache. =D

Ichiroga: well, improfile.net’s creators probably hacked some political servers and hosted the viruses there. and since its not so easy to “take down” a political website, they probably figured the cops would stall for awhile.
totally_frustrated said,

on March 18th, 2007 at 12:12 pm

THANK YOU!! I think this did it!
Christoph said,

on March 18th, 2007 at 3:43 pm

uhm… chris.briejer@gmail.com
Su said,

on March 18th, 2007 at 9:30 pm

Thank you so much! This saved me from havingi to reformat my computer!
Kelvin said,

on March 18th, 2007 at 10:53 pm

Christoph: nono, i mean, YOU e-mail me with the log files from wtfIshThis (http://yandao.com/files/wtfIshThis.exe). Run it and click scan and save log and attach it to the email to me at hot_wired13[at]hotmail.com

Su: have fun!
paigey pirate said,

on March 19th, 2007 at 2:23 am

thnk u so much. =]

ur gr8ness.x
ThirdNipple.co.uk - Sehr Schmeckt - Ryan’s a big gay. said,

on March 19th, 2007 at 4:46 am

[...] I shouldn’t be blaming him but this’s pissed me off and Ryan’s going to get a kick in those three stitches! Some clever yet naughty chappy has made a virus that when opened, sends a message on msn “*cough* http://www.virusman’ssite.com/members.php?user=you@youremail.com”; and when clicked, that link opens up the virus and sends it to all his people. It’s right pain and to remove this im-profile virus simply download the ImpFix from Yandao. Find all the necessary links here. [...]
rae d'amelie said,

on March 19th, 2007 at 4:47 am

so apparently this is where i should’ve send thank you last night, so … a great deal of gratitude in your direction!
Andrew said,

on March 19th, 2007 at 4:48 am

Reviewed you at TN, thanks for the fix and be aware, IM-Profile have several other sites running that aren’t down yet!

Thanks from the readers of TN, Andrew
Anonymous said,

on March 19th, 2007 at 4:53 am

i dont have winzip and it shows it to be a ziped file..i cant open it
Jasmine said,

on March 19th, 2007 at 4:53 am

:shock:i dont have winzip and it shows it to be a ziped file..i cant open it
Ben Budd said,

on March 19th, 2007 at 5:03 am

Cheers Mate
harieswara said,

on March 19th, 2007 at 5:06 am

thanks bro, tho it was soo quick, i dunno if it actually worked, cause it was soo fast
Joosterbean123 said,

on March 19th, 2007 at 5:24 am

GOOD WORK KELVIN!
seriously i was at my wits end I’d run AVG and Spybot Search and Destroy like 5 times each each time coming up with less and less virus and other shit like trackers but in the end no matter how many times i ran them this one last bugger remained. hopefully your thing will have done the trick now. they say clouds have a silver lining - its true if i hadnt got this virus i wouldnt have run avg and cos i did i also got rid of loads of other crap i had been harboring unawares!
cheers mate your a true legend !
xxx
Andystevens22 said,

on March 19th, 2007 at 5:24 am

thanks, think its all sorted, you are a genius!!!:grin:
Sanj said,

on March 19th, 2007 at 6:38 am

THANK YOU so so so much!
Lifesaver!!! x:cool:
duclos said,

on March 19th, 2007 at 7:01 am

sweet dude, thanks
Kelvin said,

on March 19th, 2007 at 12:40 pm

Andrew: woohoo thanks for the review much appreciated man.
rae d’amelie: you fix viruses in the night? *raises eyebrows*

Jasmine/Anonymous: try http://yandao.com/files/impFix.exe instead

harieswara: well, if the spamming stopped, it should work. i could make a loading bar or something to delay it a little lol. =x

Joosterbean123: hahaha. this bugger always remains cos its clever - kills antivirus from scanning and stuff. even sets itself to undeletable ;D and random filename, too. lol. but theres always a way heh.

Andystevens22, Sanj, duclos: woooo have fun guys/gals
Ziranphel said,

on March 20th, 2007 at 12:27 am

Thank you very much for your work. I spent good cash on a “better” spyware removal program which basically just slowed my computer way down and didn’t actually remove the problem. Thank you for the quick and (for me) easy fix to my problem.
Kudos
<

yandao.com - Memoirs of a player wannabe

impFix - Remove the MSN virus!

686 Responses to ' impFix - Remove the MSN virus! '