One of the popular IM is Msn messenger . But as the usage of this IM is increasing the virus propagate through the messenger is also increasing. The latest one is MSN VIRUS. Some technical name is

W32.Mimbot.A, W32/Delf-EXR, WORM_IRCBOT.AJY

It normally comes through the Msn attachments.Once executed it creates the folowwing files:

• %Windir%\PictureAlbum2007.zip (A zipped copy of the worm.)
• %System%\prodigys323.dll
  or
• %Windir%\myphotos2007.zip
• %System%\newsystem25.dll

Then it creates one of the following registry , every time the windows start:

� HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{448BAC42-AABD-42C5-A550-826BF4AF4BB3}\InProcServer32\”(Default)” = “prodigys323.dll”

� HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\ShellServiceObjectDelayLoad\”prodigy1″ = “{448BAC42-AABD-42C5-A550-826BF4AF4BB3}”

� HKEY_CLASSES_ROOT\CLSID\[RANDOM CLSID]\InProcServer32\”(Default)” = “newsystem25.dllThe MSN virus killer:

There is a way to kill that virus . A tool that automatically delete all the registry file but it is in the beta state You can download it from Here