I think this is a quite uncommon Virus, i don't think all details of its mechanism have been revealed yet. I would only advise you to re-install the infected computer as it could contain serious threads.
Main Topics
Browse All TopicsTalking with a friend on the MSN Messenger, occasionally a line they send is replaced with something like
http://lmageshack.org/i/im
Clearly this is a virus, but looking on the antivirus sites, several maintain they know what it is but I'm not entirely convinced. In particular, the technical removal details are very scant. Several scans have been conducted using Kapersky and AVG but I dont think it has removed it completely since I have seen the line come up again. And its quite clever.
Does anyone have any idea what files it is affecting, new files generated and registry entries created? I've put top points on this because I looked long and hard and couldnt quite find the information I needed and time is of the essence.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I knew it as a L and not a i. And yes I could download another package to disinfect. However, the purpose of the question was to find out the technical specs which dont seem very forthcoming on the anti-virus sites. Just to manually check what they doing so I can confirm that the area is sterilised myself. Reinstalling the pc is not an option.
Well if re-installing is not an option is having a virus an option???
It might be interesting from a spectators viewpoint or if the virus is isolated in a vmware, but when it is already trying to spread via msn god knows what it infected with other ways. If you got the time and fun just try to find out what it does, but personally i would rather be interested in localizing and eliminating it if i was the victim. That it can intercept msn is cool though, thumbs up on this one!
After a short look it looks like a nice combination of Trojan and password stealer. I would really get rid of this if i were you.
These instructions are for an older version, but maybe they still work? YOu might also think about getting a better Virus scanner, if it detects the virus it should be able to remove it. AVira did detect it btw.
http://www.spywareremove.c
Business Accounts
Answer for Membership
by: warturtlePosted on 2009-09-15 at 07:21:04ID: 25335170
If you pay close attention, its not i mageshack but Lmageshack. Please download MalwareBytes Anti-Malware (www.malwarebytes.org) or SuperAntiSpyware (www.superantispyware.com) and scan with them to remove any possible infections.
Hope it helps.