How to remove new msn virus

MSN messages like the above title, some goes by "Is that you on that photo…" or similar has been popping on my Instance Messenger on daily basis. If you are receiving these messages like I do, that means your friend on the other end has been infected by a MSN virus. I not sure if its deadly, but it’s sure disturbing.



These viruses goes by various names, MSN Virus Project 1; Generic2.EXO; Backdoor.Generic3.SAT. Once infected it will spread across your contact lists and sends out the above said (or similar message). If any of your IM contacts clicks on it, they will be brought via Internet Explorer to download a file name photo656.pif. If the user downloads it, there goes another users.

How to remove msn virus - Procedure

Follow the steps to Remove MSN Virus / Generic2.EXO / Backdoor.Generic3.SAT


Uninstall MSN messenger.
Go to Start > Control Panel > Add/Remove Programs.
Find Toolbar888 and uninstall it
Press CTRL+ALT+DELETE
Just end the following process(don?t worry if you cant find all of them):
Update.exe
goll.exe
loadadv455.exe
drsmartload.exe
goll.exe
two.exe
vcncr.exe
rorjxk.exe
eyewblbby.exe
cgqrvrva.exe
Now Delete the Following Folders :

C:\Program Files\Common Files\{28676FB5-0AE9-3081-1205-03030930003d}\
C:\Program Files\Common Files\{38676FB5-0AE9-3081-1205-03030930003d}\
Search and delete all occurances of the following files(dont worry if you dont all of these).
goll.exe
drv.exe
loadadv455.exe
one.exe
two.exe
The files are found in
"C:\Windows\system32\"
"C:\Documents and Settings\[current user] " ( [current user] is the name you are currently logged on as)
"C":\ (be careful what you delete here)
Scan your computer with a AV. Now all that you may need to reinstall MSN Messenger again.
So this is how msn virus can be removed