# Help me get rid of this apparent virus

**URL:** <https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724>\
**Category:** Factual Questions\
**Created:** [March 25, 2010, 10:10am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724 "2010-03-25T10:10:11Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Darryl\_Lict](https://avatars.discourse-cdn.com/v4/letter/d/7cd45c/32.png) [@Darryl\_Lict](https://boards.straightdope.com/u/Darryl_Lict)\
**Post date:** [March 25, 2010, 10:10am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/1 "2010-03-25T10:10:11Z")

</div>

I’ve got this weird startup window which appears to be a virus.

[Link to screen shot.](http://farm3.static.flickr.com/2679/4462239888_4471ff4aa9_o.jpg)

I’ve run though the all the virus checkers and stuff mentioned on the computer virus sticky here on General Questions.

I’ve looked in my Startup folder and don’t see anything suspicious.

Has anyone seen anything like this? Any idea how to get rid of it?

---

<div class="post-metadata">

**Author:** ![Racer1](https://avatars.discourse-cdn.com/v4/letter/r/ee59a6/32.png) [@Racer1](https://boards.straightdope.com/u/Racer1)\
**Post date:** [March 25, 2010, 10:19am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/2 "2010-03-25T10:19:32Z")

</div>

Isn’t that just an MSN Messenger contact request?

What happens if you click to block the request and then click ok?

Incidentally, to see a full list of things that startup with Windows, you can go to Start\Run and type msconfig. This has a startup tab.

---

<div class="post-metadata">

**Author:** ![gommsn](https://avatars.discourse-cdn.com/v4/letter/g/bcef8e/32.png) [@gommsn](https://boards.straightdope.com/u/gommsn)\
**Post date:** [March 25, 2010, 10:36am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/3 "2010-03-25T10:36:17Z")

</div>

I get them every so often. Not sure where they generate from, seemingly from Messenger but who knows.  
I just click block and ok. I’ve never noticed any adverse effects from them.

---

<div class="post-metadata">

**Author:** ![Blake](https://avatars.discourse-cdn.com/v4/letter/b/a9a28c/32.png) [@Blake](https://boards.straightdope.com/u/Blake)\
**Post date:** [March 25, 2010, 10:46am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/4 "2010-03-25T10:46:26Z")

</div>

If you’re using XP and, like ,most people, never use messenger, then Heartily recommend “[Shoot The Messenger](http://www.grc.com/stm/shootthemessenger.htm)” to eliminate the problem for good.

---

<div class="post-metadata">

**Author:** ![lazybratsche](https://avatars.discourse-cdn.com/v4/letter/l/ba8739/32.png) [@lazybratsche](https://boards.straightdope.com/u/lazybratsche)\
**Post date:** [March 25, 2010, 11:59am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/5 "2010-03-25T11:59:43Z")

</div>

That popup comes via Windows Messenger Service, which is an antiquated bit of software that’s included in Windows XP and runs by default. It has no useful purpose for the ordinary home user\*, and all it will do is allow popup messages like the one you link. You don’t have to worry about a virus unless you follow those links to sketchy malware-infested sites. Microsoft gives you instructions on how to disable it [here](http://www.microsoft.com/windowsxp/using/security/learnmore/stopspam.mspx).

Confusingly, this service is NOT the same as MSN or Windows Messenger, which are full-featured chat programs. If you use either, you can still safely disable the messenger service.

\*I think that it was once used as a logging and automated messaging tool for the administration of large networks. Some may still use it?

ETA: It looks like I may have confused myself – your message has a contact list request, which probably means it’s through Windows Messenger (the instant messaging program, not the service). [Here’s](http://www.pchell.com/support/removemessenger.shtml) a link on how to disable it.

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [March 25, 2010, 12:01pm UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/6 "2010-03-25T12:01:10Z")

</div>

> [@Blake](#):
>
> If you’re using XP and, like ,most people, never use messenger, then Heartily recommend “[Shoot The Messenger](http://www.grc.com/stm/shootthemessenger.htm)” to eliminate the problem for good.

Windows Messenger (the thing that appears to be generating the OP’s dialog) and the Windows Messaging Service (described in your link) are two different, not-very-related things.

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [March 25, 2010, 12:02pm UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/7 "2010-03-25T12:02:25Z")

</div>

> [@lazybratsche](#):
>
> That popup comes via Windows Messenger Service

I don’t think it is. That looks like a dialog from MSN/Windows Live Messenger.

---

<div class="post-metadata">

**Author:** ![Darryl\_Lict](https://avatars.discourse-cdn.com/v4/letter/d/7cd45c/32.png) [@Darryl\_Lict](https://boards.straightdope.com/u/Darryl_Lict)\
**Post date:** [March 25, 2010, 7:42pm UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/8 "2010-03-25T19:42:28Z")

</div>

Thanks for all the replies. I had just never seen such a message before and just assumed it was a virus. I’ll just go ahead and try to disable it I guess.

---

<div class="post-metadata">

**Author:** ![Tim\_T-Bonham.net](https://avatars.discourse-cdn.com/v4/letter/t/46a35a/32.png) [@Tim\_T-Bonham.net](https://boards.straightdope.com/u/Tim_T-Bonham.net)\
**Post date:** [March 26, 2010, 2:52am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/9 "2010-03-26T02:52:10Z")

</div>

> [@Darryl\_Lict](#):
>
> and just assumed it was a virus.

No, just typical Microsoft code. There is some difference between that and a virus, but it’s too technical to explain here.

---

<div class="post-metadata">

**Author:** ![Dallas\_Jones](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dallas_jones/32/3277_2.png) [@Dallas\_Jones](https://boards.straightdope.com/u/Dallas_Jones)\
**Post date:** [March 26, 2010, 4:02am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/10 "2010-03-26T04:02:54Z")

</div>

> [@Blake](#):
>
> If you’re using XP and, like ,most people, never use messenger, then Heartily recommend “[Shoot The Messenger](http://www.grc.com/stm/shootthemessenger.htm)” to eliminate the problem for good.

Attempting to download Shoot The Messenger from your link results in my Norton blocking a threat called Supicious.MH690.A

---

<div class="post-metadata">

**Author:** ![Perciful](https://avatars.discourse-cdn.com/v4/letter/p/b38774/32.png) [@Perciful](https://boards.straightdope.com/u/Perciful)\
**Post date:** [March 26, 2010, 4:07am UTC](https://boards.straightdope.com/t/help-me-get-rid-of-this-apparent-virus/533724/11 "2010-03-26T04:07:04Z")

</div>

> [@ghardester](#):
>
> Attempting to download Shoot The Messenger from your link results in my Norton blocking a threat called Supicious.MH690.A

Good it was a virus then. Norton will innoculate it.
