Security Incidents mailing list archives
Re: AIM virus / worm
From: "Steven" <steven () lovebug org>
Date: Thu, 27 Oct 2005 18:39:33 -0400
Yes,These are some of the very common backdoor/IRC client worms that are spreading. They probably have slightly different code so they are not picked up by AV software for a while. They will spread through AIM/MSN/Yahoo! via messages saying just like you posted.
Steven----- Original Message ----- From: "Michael Gargiullo" <mgargiullo () pvtpt com>
To: <incidents () securityfocus com> Sent: Thursday, October 27, 2005 4:26 PM Subject: AIM virus / worm
Has any one seen this before... Google showed no results... Instant message from a friend on your buddy list with a link like so... see this!! http://home.comcast.net/~svyskocil/image0088.com and HILARIOUS!! http://home.earthlink.net/~ylee92504/pic0041.com Symantec corp with defs from yesterday don't detect anything in the com file, but it does propagate when executed.
Current thread:
- AIM virus / worm Michael Gargiullo (Oct 27)
- Re: AIM virus / worm Pete Markowsky (Oct 27)
- Re: AIM virus / worm Steven (Oct 27)
- <Possible follow-ups>
- Re: AIM virus / worm Security Pope (Oct 27)