Feb. 11th, 2004
WARNING - AIM WORM SPREADING RAPIDLY  
If you get an IM from someone (likely from your buddy list) that says something like:

check this out... http://www.gutv.ZZZ/osama_capture.php?gVYq

DO NOT CLICK ON IT (I changed .com to .ZZZ, btw). It's just started spreading, and virus scanners don't seem to have virus definitions updated yet to handle it.

As a general rule, if you get links like this, you should only run them in IE if you first add the site to your restricted zone. Or, copy and pasting the link into a Mozilla-based browser like Netscape, Mozilla, or FireFox is often safer.

but this link... don't run anywhere!

[edit: Network Associates has reported on this here. Evidentally the site will not install anything unless you click YES to the security warning that comes up. (Of course, a lot of people just click YES when those windows pop up). If you did install the software, it will then begin IMing people on your buddy list to send them ads. NAI includes removal instructions]
 
 
Listening to: Taking Back Sunday - There's No I In Team
 
 
( Post a new comment )
brett bretterson: dancesomthingscatchy on February 11th, 2004 - 12:20 am
wow i totally just got a few IMs like that.
thanks super david
(Reply) (Thread) (Link)
The People's Exhibit Adavidology on February 11th, 2004 - 01:23 am
Re:
yea I've gotten one already. That's what prompted me to look. Bastards are getting quick!
(Reply) (Parent) (Thread) (Link)
cowslayer on February 11th, 2004 - 12:40 am
What if you already did?
(Reply) (Thread) (Link)
The People's Exhibit Adavidology on February 11th, 2004 - 01:16 am
Re:
Unfortunately, none of the major virus seem to have info on it yet. Hopefully they'll have something up by tomorrow. The only reference on the web suggests it doesn't do anything damaging — just IMs everyone on your buddy list to infect them. Of course, who knows.

Once you have it off your computer though you should change the password of any accounts you have the password saved for.
(Reply) (Parent) (Thread) (Link)
The People's Exhibit Adavidology on February 11th, 2004 - 09:42 pm
Re:
I updated the entry with a link to remove the program. Good news is, it doesn't install unless you click YES to the security warning after you visit that site.
(Reply) (Parent) (Thread) (Link)
All About Me: hey can we tlk about it...allaboutnumber2 on February 11th, 2004 - 08:15 am

Thanks David I feel less worried... still about that password change thing... oy thinking about that is a bitch only cus I really like the ones I have... grr

keep us posted, please. ::hugs::

-Rob
(Reply) (Thread) (Link)
The People's Exhibit Adavidology on February 11th, 2004 - 09:44 pm
Re:
Looks like you're okay on passwords with this one. It just installs ad-ware on your computer. But there are scripts that will attempt to copy your AOL password cache and send it out.
(Reply) (Parent) (Thread) (Link)