Wish I had read this 2 days ago.

**myquitehead** · 12-08-2005, 09:06 AM

Researchers at IMLogic Inc.'s Threat Center spotted the new threat and warned that virus writers are continuing to push the social engineering envelope to trick computer users into downloading nasty malware programs.

The newest worm, identified as IM.Myspace04.AIM, is coded to chat and persuade the victim to click on a malicious URL embedded in the IM message.

If the first attempt at infection is unsuccessful and the victim replies to doubt the legitimacy of the link being sent, the worm replies with the following message: "lol no its not its a virus."

Like other IM worms spreading over AOL's instant messaging network, the bot uses an infected user's buddy list to propagate itself, carrying on a conversation with new victims without the infected user's knowledge.

http://www.eweek.com/article2/0,1895,1897381,00.asp

**40sondacurb** · 12-08-2005, 11:09 AM

Wow .

**JeremyC** · 12-08-2005, 11:23 AM

Quote:

Originally Posted by 40sondacurb

Wow .

my thoughts exactly. the worst part people are dumb enough to believ it.

mimo2005 · 12-08-2005, 01:06 PM

Quote:

Wish I had read this 2 days ago.

well , my friend , the first thing you should have done is when you install any Instant Messaging aol or msn , there is a setup that allows your antivirus from scanning files or even blocking any url address to show up when chatting with someone .

**myquitehead** · 12-08-2005, 01:56 PM

Actually I usually rely on my brain to block urls. I was tired

LOL then I spelled "brian" wrong

**DumberDrummer** · 12-08-2005, 03:45 PM

wow, that's scary.

Never open an unsolicited link, I guess is the moral, or don't drink and chat :P

yustr · 12-08-2005, 04:00 PM

Quote:

Originally Posted by mimo2005

there is a setup that allows your antivirus from scanning files or even blocking any url address to show up when chatting with someone .

Does anyone know what that is (how to activiate) for AIM? I want to check my daughter's comp tonight...

mimo2005 · 12-08-2005, 04:10 PM

Quote:

Originally Posted by yustr

Does anyone know what that is (how to activiate) for AIM? I want to check my daughter's comp tonight...

under
TOOLS /OPTIONS / Transfert

i am sure there is same feature with aol .

**Grove** · 12-09-2005, 01:17 AM

Glad I don't use IM.

v-six · 12-09-2005, 06:12 AM

a few days ago, I got a message from someone that I didn't even know had my screen name. Their message was "Don't click that link!"
no link was ever sent...

**Grove** · 12-09-2005, 05:13 PM

Would this security flaw affect you if you were using a program like Trillian that connects to IM, MSN etc ?

**DumberDrummer** · 12-09-2005, 05:37 PM

its the URL that you click that causes problems, not the actual program.

I could send it in your email, the point is that it is so bad because it appears to come from a legitimate source, IE, your buddy from school.

ebackhus · 12-09-2005, 06:57 PM

My sister sent me an IM from my parent's PC that had a viral link. I decided then and there that I'd go over, wipe it, and lock the HELL out of her account. XP is installing as we speak.

**Terrister** · 12-09-2005, 09:02 PM

This thing spreads by IM'ing all the people in your contact list as you. I don't think this part of the virus would work on a non AIM client like Trillian. I am not curious enough to test this by opening the link, should it be sent to me.

**Grove** · 12-09-2005, 09:27 PM

Neither am I. I think I'll just stick safe to MSN ... and the block checker virus

**Midnight Tech** · 12-10-2005, 09:19 PM

I read it...and fell for the Yahoo version....

Emporer_D · 12-10-2005, 09:59 PM

Anyone who's stupid enough to click the link deserves the virus.

**devil lady** · 12-10-2005, 10:02 PM

Anyone that messages me with a link gets reported as spam unles I'm talking face to face with them at the time.

Emporer_D · 12-10-2005, 10:24 PM

Not you have to click it man. It could be ligit. Then you'd just be reporting someone who never did anything.

**devil lady** · 12-10-2005, 10:56 PM

I mean the links that get sent from every bot on the net as soon as you go into a chat room. They all get reported as I have no wish to view porn etc.

12-08-2005, 09:06 AM	#1 (permalink)
myquitehead TSF Enthusiast Join Date: Jun 2005 Posts: 572 OS: XP Pro Sp1	Wish I had read this 2 days ago. Researchers at IMLogic Inc.'s Threat Center spotted the new threat and warned that virus writers are continuing to push the social engineering envelope to trick computer users into downloading nasty malware programs. The newest worm, identified as IM.Myspace04.AIM, is coded to chat and persuade the victim to click on a malicious URL embedded in the IM message. If the first attempt at infection is unsuccessful and the victim replies to doubt the legitimacy of the link being sent, the worm replies with the following message: "lol no its not its a virus." Like other IM worms spreading over AOL's instant messaging network, the bot uses an infected user's buddy list to propagate itself, carrying on a conversation with new victims without the infected user's knowledge. http://www.eweek.com/article2/0,1895,1897381,00.asp

12-08-2005, 11:09 AM	#2 (permalink)
40sondacurb Don't be a menace Join Date: Jan 2005 Posts: 6,285 OS: Vista sp2	Wow . __________________ Donate to keep the forum running

12-08-2005, 01:56 PM	#5 (permalink)
myquitehead TSF Enthusiast Join Date: Jun 2005 Posts: 572 OS: XP Pro Sp1	Actually I usually rely on my brain to block urls. I was tired LOL then I spelled "brian" wrong Last edited by myquitehead; 12-08-2005 at 02:01 PM.

12-08-2005, 03:45 PM	#6 (permalink)
DumberDrummer Cymru am byth Join Date: Oct 2003 Location: Oregon Posts: 5,385 OS: Windows XP Pro SP2 My System	wow, that's scary. Never open an unsolicited link, I guess is the moral, or don't drink and chat :P __________________ Living with Louie dog's the only way to stay sane _____________________________________________ ... and with those words so begins my lifetime of longing for the devil's warm embrace

12-09-2005, 01:17 AM	#9 (permalink)
Grove Professor/Moderator, TSF Design School Join Date: Jun 2005 Location: Australia Posts: 2,383 OS: Windows Vista SP2 32bit	Glad I don't use IM. __________________ ========================================== Get Help: TSF Security Forum \| HijackThis \| MB's 5 Step Process Get Clean: AdAware SE \| Spybot S&D \| CWShredder \| Ewido \| CleanUp! Get Protected: SpywareBlaster \| SpywareGuard \| Windows Updates \| IE-SpyAd If TSF has helped you, please consider making a donation to help keep the board running.

12-09-2005, 06:12 AM	#10 (permalink)
v-six Manager Emeritus Join Date: Sep 2004 Location: Gardiner, NY Posts: 2,076 OS: OS X for mac, XP Pro for PC	a few days ago, I got a message from someone that I didn't even know had my screen name. Their message was "Don't click that link!" no link was ever sent... __________________ mysql> --i-am-a-dummy

12-09-2005, 05:13 PM	#11 (permalink)
Grove Professor/Moderator, TSF Design School Join Date: Jun 2005 Location: Australia Posts: 2,383 OS: Windows Vista SP2 32bit	Would this security flaw affect you if you were using a program like Trillian that connects to IM, MSN etc ? __________________ ========================================== Get Help: TSF Security Forum \| HijackThis \| MB's 5 Step Process Get Clean: AdAware SE \| Spybot S&D \| CWShredder \| Ewido \| CleanUp! Get Protected: SpywareBlaster \| SpywareGuard \| Windows Updates \| IE-SpyAd If TSF has helped you, please consider making a donation to help keep the board running.

12-09-2005, 05:37 PM	#12 (permalink)
DumberDrummer Cymru am byth Join Date: Oct 2003 Location: Oregon Posts: 5,385 OS: Windows XP Pro SP2 My System	its the URL that you click that causes problems, not the actual program. I could send it in your email, the point is that it is so bad because it appears to come from a legitimate source, IE, your buddy from school. __________________ Living with Louie dog's the only way to stay sane _____________________________________________ ... and with those words so begins my lifetime of longing for the devil's warm embrace

12-09-2005, 06:57 PM	#13 (permalink)
ebackhus Manager, Design Join Date: Apr 2005 Location: SATX Posts: 14,249 OS: WinXP Pro SP3/Windows 7 RTM My System Blog Entries: 28	My sister sent me an IM from my parent's PC that had a viral link. I decided then and there that I'd go over, wipe it, and lock the HELL out of her account. XP is installing as we speak. __________________ ----------------------------- There are no dumb questions, unless a customer is asking them. Help in the fight against cancer and other serious illnesses.

12-09-2005, 09:02 PM	#14 (permalink)
Terrister Moderator Hardware Forum Join Date: Apr 2005 Location: West Georgia, USA Posts: 7,098 OS: Xp	This thing spreads by IM'ing all the people in your contact list as you. I don't think this part of the virus would work on a non AIM client like Trillian. I am not curious enough to test this by opening the link, should it be sent to me. __________________

12-09-2005, 09:27 PM	#15 (permalink)
Grove Professor/Moderator, TSF Design School Join Date: Jun 2005 Location: Australia Posts: 2,383 OS: Windows Vista SP2 32bit	Neither am I. I think I'll just stick safe to MSN ... and the block checker virus __________________ ========================================== Get Help: TSF Security Forum \| HijackThis \| MB's 5 Step Process Get Clean: AdAware SE \| Spybot S&D \| CWShredder \| Ewido \| CleanUp! Get Protected: SpywareBlaster \| SpywareGuard \| Windows Updates \| IE-SpyAd If TSF has helped you, please consider making a donation to help keep the board running.

12-10-2005, 09:19 PM	#16 (permalink)
Midnight Tech Admin/Head GreaseMonkey/Igor's alter ego/Grand Exalted PoohBah Join Date: Dec 2001 Location: SC Posts: 2,920 OS: Windows XP Home/Pro SP3/Windows 98SE/Fedora Core 6/RH 7.2 with Autopoint/TAMS II	I read it...and fell for the Yahoo version.... __________________ Please post all questions in the appropriate forum. Questions sent by email or PM will not be answered. Sharing my life...with my Imzadi! Interested in Trek gaming? Check out the Dynaverse! Proud supporter of the Carolinas Aviation Museum. If we have helped you in any way, please donate to keep TSF up and running!

12-10-2005, 09:59 PM	#17 (permalink)
Emporer_D Registered User Join Date: Jul 2005 Location: Pacific Northwest Posts: 243 OS: Windows 7 Beta, Ubuntu 8.04 My System	Anyone who's stupid enough to click the link deserves the virus. __________________ Your mind is like a sword, it's easier to kill people when it's sharp.

12-10-2005, 10:02 PM	#18 (permalink)
devil lady Tech, Design Team Join Date: Sep 2005 Location: Tasmania, Australia Posts: 962 OS: XP SP2 My System	Anyone that messages me with a link gets reported as spam unles I'm talking face to face with them at the time. __________________ . HiJackThis Everest Home Edition Ad Aware Spybot S & D Ewido online scan Spyware Blaster

12-10-2005, 10:24 PM	#19 (permalink)
Emporer_D Registered User Join Date: Jul 2005 Location: Pacific Northwest Posts: 243 OS: Windows 7 Beta, Ubuntu 8.04 My System	Not you have to click it man. It could be ligit. Then you'd just be reporting someone who never did anything. __________________ Your mind is like a sword, it's easier to kill people when it's sharp.

12-10-2005, 10:56 PM	#20 (permalink)
devil lady Tech, Design Team Join Date: Sep 2005 Location: Tasmania, Australia Posts: 962 OS: XP SP2 My System	I mean the links that get sent from every bot on the net as soon as you go into a chat room. They all get reported as I have no wish to view porn etc. __________________ . HiJackThis Everest Home Edition Ad Aware Spybot S & D Ewido online scan Spyware Blaster