Google Talk virus?

December 10, 2009 at 03:30:01
Specs: Windows XP
two days before i opened one link received from my some crap message and link are going automatically to all my chat friends...what shud i do??

See More: Google Talk virus?

Report •

December 10, 2009 at 14:39:28
It must be removed of course, but we have to try to find the bad files.

Please run RSIT.exe by random/random and post its logs.

Download random's system information tool (RSIT) by random/random from the following link and save it to your desktop.


1. Double click on RSIT.exe to launch program.
2.(Vista Users Only) Right click on the RSIT.exe icon and select "Run as Administrator" to run the program.
3. Click Continue at the disclaimer screen.
4. Your firewall may alert you that RSIT is requesting Internet access. Please allow it.
5.Once it has finished, two logs will open: log.txt<-- this will be maximized and info.txt<-- this will be minimized. Both logs will be located at C:\RSIT.exe.

Please post the contents of both logs (in separate post) in your next reply. It may take 3 to 4 post to get the entire log to us.

Download Gmer.exe from the following link.


1. Disconnect from the Internet and close all running programs.
2. Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
3. Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
4. Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.
5. GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
6. If you receive a WARNING!!! about rootkit activity and are asked to fully scan your NO.
7. Now click the Scan button. If you see a rootkit warning window, click OK.
8. When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
9. Click the Copy button and paste the results into your next reply.
•Exit GMER and re-enable all active protection when done.

Report •

December 11, 2009 at 11:15:15
The malware name is WIN32.TROJAN.BUZUS
THE FILE IS wmismqt.exe
Solved with ADAware

Yes, I also experienced same in Gtalk. Some messges going to all my contact list without our intention.Same time the system is found freazed till the message being to sent all contacts. Even cant do End Of Prgrm by Cntr+Alt+Delte.
Those who are clicking the link spreading the same to their contact list.
SAme time it is found that the malware/spyware tools ALREADY installed like MALWAREBYTE / SPYBOT SEARCH also GOT DISABLED BY the SAME VIRUS/MALWARE.
ESET like internet security also couldnt make anyhting.
Even ESET couldnt block the file initiation.I heard other known virus/internet security also coudnt make it.

Then I installed Ad-aware malware tool kit from
Then did a scan and restarted as per the suggesion.
It worked good.

The malware name is WIN32.TROJAN.BUZUS
THE FILE IS wmismqt.exe

You, better try with Malwarebyte tool (from,
becuase it is of 10 to 15 mb , easy to download.
If it is not ok, then try with Ad-aware 8.1 ( 80mb)

Report •

Related Solutions

Ask Question