Re: buddylinks worm

[Dennis Cheung <dennis () pa net>]

Jason Yates wrote:

> Another one of the AOL worms; this one instant messages all users on 
> your buddy list.  The message I've recieved is "check this out: 
> http://ww.wgutv.com/osama_capture.php?bNek";.  The link is a fact news 
> website telling you to download some software .  Once you install the 
> software on the page; it immediately instant messages everyone on your 
> buddy list.
>
> The software it installs is something called buddylinks.  According to 
> buddylinks.net, Buddylinks is a "revolutionary new way for instant 
> messenger users to instantaneously share entertaining content with 
> their entire IM "buddy list" network all at one time".  I can't make 
> this stuff up.
>
> Jason Yates
>
> --------------------------------------------------------------------------- 
>
> Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
>
> Protect your network with the comprehensive security solution that
> integrates six applications for ease of use and lower TCO.
>
> Firewall - Virus protection - Spam protection - URL blocking - VPN
> - Wireless security.
>
> Download 30-day evaluation at:
> http://www.astaro.com/php/contact/securityfocus.php
> ---------------------------------------------------------------------------- 
A friend has gotten infected with this "revolutionary" product.  Has 
anyone tried removing this thing manually before?  The buddylinks site 
has a unsubscribe feature that claims to work, but at the moment I am 
reluctant until I figure out what exactly this thing is.

-Dennis

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------