greatings.com
E-card.net
E-card.ru
and
e-greettings.ru
any links from these sites should not be clicked on.
These are from the " who's blocked you sites" when you sign into these sites to see who's blocked you (they then get your messenger password)
then they can auto sign into your messenger now and then and im everyone on your list with a link,thus spreading the virus.
How to stop this
CHANGE YOUR PASSWORD delete temp files and cookies
remove the virus file name from your list.. and as far as I am aware that will sort it.......
IF you get a message with a link in do NOT click on it (just close the window and let that person know to change their password and why tc. If they refuse then no offence but block and delete them as its what i shall be doing........... we must keep our pc,s safe .