Security Incidents mailing list archives

Re: AIM virus / worm


From: "Steven" <steven () lovebug org>
Date: Thu, 27 Oct 2005 18:39:33 -0400

Yes,

These are some of the very common backdoor/IRC client worms that are spreading. They probably have slightly different code so they are not picked up by AV software for a while. They will spread through AIM/MSN/Yahoo! via messages saying just like you posted.

Steven


----- Original Message ----- From: "Michael Gargiullo" <mgargiullo () pvtpt com>
To: <incidents () securityfocus com>
Sent: Thursday, October 27, 2005 4:26 PM
Subject: AIM virus / worm


Has any one seen this before... Google showed no results...

Instant message from a friend on your buddy list with a link like so...

see this!! http://home.comcast.net/~svyskocil/image0088.com

and

HILARIOUS!! http://home.earthlink.net/~ylee92504/pic0041.com

Symantec corp with defs from yesterday don't detect anything in the com
file, but it does propagate when executed.





Current thread: