Remove “Hi, this is your photo ?” MSN / Windows Live Messenger Virus

by Abhishek Bhatnagar on February 25, 2010



Internet is a place which is flooded with security problems and viruses and you need to stay alert of any suspicious links or messages in the inbox or instant messenger.


There has been a virus which is spreading through MSN / Live messenger which shows you a link in the IM window with a text which says

“Hi,this is your photo? – some link here

Do not click on the link on this message, this takes you to a url which infects your computer with this virus. It downloads a virus file called Picture_2525.exe and installs it.

If you have accidentally clicked this link, below is the method to remove this virus manually.



We recommend that you always use a good antivirus tool, free or paid, with real-time protection which can save you from such viruses.

If this virus has already infected your computer, open the task manager by pressing Shift + CTRL + ESC key together and kill the following tasks :



After this you need to kill the virus service. Press Windows Key + R and type the following command and press enter:

sc delete svlostServices


After this is open the following folder -  c:\Windows\System32  and delete the below mentioned files:



Now clean the Registry entries by running following commands using Windows Key + R using the run prompt:

reg delete "hkcu\software\microsoft\internet explorer\main" /v default_page_url /f
reg delete "hkcu\software\microsoft\internet explorer\main" /v "Start Page" /f


As a precautionary measure, change your MSN / Windows Live Password.


[ Source – ]

If you like this article or this article helped you, you can +1 to recommend this article on google plus.

You can follow us on Twitter or join our Facebook Fan Page. If you have a question to ask us, submit your question at Answers By Trouble Fixers.

Looking for something else? Search here :

Leave a Comment

Previous post:

Next post:

© TroubleFixers – All about fixing computer troubles2007-2016 . All Rights Reserved.