detected modification of riskware 'Hidden data sending'.

[black2]

My Kaspersky Internet Security (KIS) always show something like below when i surf'd the net. (A red notice box appeared below on the right side.)

========================================================================================
:Running process C:\Program Files\MSN Messenger\msnmsgr.exe: detected modification of riskware 'Hidden data sending'.

:Process C:\Program Files\MSN Messenger\msnmsgr.exe (PID: 3712): attempt to perform suspicious actions is allowed.
=========================================================================================


I wonder whats that mean "hidden data sending" does that mean virus is in the msnmsgr.exe that trying to send info out of my comp?

I scan'd the system without finding a virus. Also, on the kaspersky Protection window, under the Events tab it show this:

=================================================================================================
1/11/2008 12:03:18 PM Process (PID 3172) tried to access Kaspersky Internet Security process (PID 1548), but the action has been blocked by the Self-Defense component. No action on your part is required.
1/11/2008 12:03:18 PM Process (PID 3172) tried to access Kaspersky Internet Security process (PID 1928), but the action has been blocked by the Self-Defense component. No action on your part is required.
=================================================================================================

Can anyone explain what is that?

[Raymond]

I suggest you upload msnmsgr.exe to virustotal and do a scan with multiple antivirus. Some trojans are known to inject themselves to legitimate programs to bypass firewall.

[blackrose]

I suggest scan your PC with Spyware doctor v5 or Zone Alarm and a good Anti-Trojan Programs. As far as I know Kaspersky is the best still it cannot detect all other risks such as Trojan, worms.

Single security product will never project your system.

[Raymond]

Single security product will never project your system.

Yeap that's right :cool: Sometimes not even Kaspersky Internet Security.

[black2]

thanx for advice. :)

[lewlim]

My experience is kaspersky has many false positives. One way is to boot in safe mode and use sdfix.

[Raymond]

You can't compare sdfix with kaspersky. One is on-demand virus scanner and the other is real-time. sdfix doesn't provide protection, it only cleans viruses.

Heard of prevention is better than cure? :P