Since we all us AIM...
Apr. 10th, 2002 08:29 pm![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
amezriVirus Spread through AOL Instant Messenger
From the school broadcast e-mail:
There is a new and potentially dangerous virus that has been infecting other college campuses. This virus is especially dangerous because in addition to spreading through e-mail, it spreads through AOL Instant Messenger. Instant Messenger is not support by computer services (to the Administrative side of the campus) however as it may have been installed by users we are sending this alert. New antivirus definitions which can detect this virus will be available Thursday morning. Below is a list of messages that the virus sends. The worm hooks AOL Instant Messenger client Windows such that whenever an AIM users sends a message, the recipient will receive the following message instead:
User: cool, (infected system's IP address):8180
Note: the word "cool," may be replaced with any of the following words/phrases
* btw, download this, * I wanted to show you this, * please check this out, * hey go to, * download this, * see if you can get this to work, * this is cool, * tell me what you think about, * try this, * I almost forgot about, * I like this, * what about, * have you seen, * interesting, * lol, * wow, * whoa, * neat, * hmm, * psst, * hehe, * haha, * silly, * weird,
Delete anything that looks like this immediately.
From Symantec.com:
W32.Aplore@mm is a mass-mailing worm that attempts to spread using email, IRC and AOL Instant Messenger (AIM).
The worm sends an email containing the attachment Psecure20x-cgi-install.version.6.01.bin.hx.com to all addresses found in the Microsoft Outlook address book.
When connected to IRC or AIM, the worm sends a web link to IRC channels or AIM contacts which references an .html file which was dropped on the infected computer. This file displays as a Webpage which asks the visitor to run a copy of the worm.
More info here...
Take it for what it's worth. I'm glad I don't use Outlook :-P My computer is messed up enough as it is. Though now would probably be a good time to update Norton and AIM.
From the school broadcast e-mail:
There is a new and potentially dangerous virus that has been infecting other college campuses. This virus is especially dangerous because in addition to spreading through e-mail, it spreads through AOL Instant Messenger. Instant Messenger is not support by computer services (to the Administrative side of the campus) however as it may have been installed by users we are sending this alert. New antivirus definitions which can detect this virus will be available Thursday morning. Below is a list of messages that the virus sends. The worm hooks AOL Instant Messenger client Windows such that whenever an AIM users sends a message, the recipient will receive the following message instead:
User: cool, (infected system's IP address):8180
Note: the word "cool," may be replaced with any of the following words/phrases
* btw, download this, * I wanted to show you this, * please check this out, * hey go to, * download this, * see if you can get this to work, * this is cool, * tell me what you think about, * try this, * I almost forgot about, * I like this, * what about, * have you seen, * interesting, * lol, * wow, * whoa, * neat, * hmm, * psst, * hehe, * haha, * silly, * weird,
Delete anything that looks like this immediately.
From Symantec.com:
W32.Aplore@mm is a mass-mailing worm that attempts to spread using email, IRC and AOL Instant Messenger (AIM).
The worm sends an email containing the attachment Psecure20x-cgi-install.version.6.01.bin.hx.com to all addresses found in the Microsoft Outlook address book.
When connected to IRC or AIM, the worm sends a web link to IRC channels or AIM contacts which references an .html file which was dropped on the infected computer. This file displays as a Webpage which asks the visitor to run a copy of the worm.
More info here...
Take it for what it's worth. I'm glad I don't use Outlook :-P My computer is messed up enough as it is. Though now would probably be a good time to update Norton and AIM.
