I.T. Vibe
Latest Business Communications Gaming General Security Technology Virus  
   Member Services
Login
Register
   General Services
Contact Us
Merchandise
Toolbar
RSS Feeds
Other Formats
   Site Search
 
Advanced Search
   News Alerts
Enter your email address to receive news alerts
 
View Privacy Policy
Unsubscribe
   Information
Latest Virus Alerts
Internet Threat Level
Internet Traffic Report
   Opinion Poll
Macs - Love Them or Hate Them? Place your votes now.
Love 'em
Hate 'em
Indifferent
Reader Comments: 0
View All Polls
MSN Messenger worm displays sexy chickens
Thursday, February 03, 2005 at 22:05 by Laurence Norah
Trend Micro today issued a medium risk alert for a worm which spreads using MSN Messenger. The worm, which is a variant ot the Bropia worm, lures users with promises of sexy images, but if a user downloads the link all they get is a photograph of a roast chicken with a bikini tan line. No one ever said virus writers don't have a sense of humour.

Less amusing is the other part of the payload. As well as attempting to send itself to all of a users contacts on their MSN Messenger list, the worm installs the Agobot.AJC worm on a users system. This worm opens a backdoor onto the users machine, and is also able to steal various CD keys from applications, as well as the Windows Product ID.

The filenames that the worm attempts to propagate with are as follows:

Bedroom-thongs.pif
Hot.pif
LMAO.pif
LOL.scr
Naked_drunk.pif
New_webcam.pif
ROFL.pif
Underware. Pif
Webcam.pif

The file is usually around 184KB in size. All Windows platforms from Windows 95 to XP are vulnerable, without the latest in virus protection running. As always we'd recommend you don't accept files from any untrusted source unless you are certain of their content, be they in e-mail attachment form or any other form. Also, ensure you keep your anti-virus and operating system patches as up to date as possible.


 
Contact Laurence Norah, the author of this article View a printer friendly version of this article Email this article to a friend RSS Feeds

Comment # 1 on 04 February 2005 at 04:24 by Wilo
Thx Rich, though I use Norton am sure the procedure is pro'lly the same. Any news on the MSN bug? Its crashed computers of some of my friends on my MSN list. Whats the safe solution, I removed MSN and downloaded it again u think that will help? Peace ~! [rock]

Comment # 2 on 04 February 2005 at 06:51 by Rich
Please follow this [url="http://www.sophos.com/support/disinfection/worms.html"]guide for removing worms[/url].

Comment # 3 on 04 February 2005 at 17:43 by Loz
the worm only arrive via messenger, it does not affect messenger as such. to ensure you don't get it again, ensure you only open files that you *know* the content of, and run an anti-virus program at all times, with real time protection switched on.

Comment # 4 on 08 February 2005 at 21:22 by kavakava
I just love this. Sexy chickens?

Comment # 5 on 11 February 2005 at 23:24 by mr.p2p
sex lures are dumb

Comment # 6 on 13 February 2005 at 03:59 by Anonymous
yeah

Comment # 7 on 16 February 2005 at 03:08 by Anonymous
I think you can add handcuffs.pif

Comment # 8 on 25 February 2005 at 20:28 by Anonymous
sexy sex

Comment # 9 on 27 February 2005 at 18:39 by Anonymous
wtf

Comment # 10 on 07 March 2005 at 23:15 by Anonymous
you can also add cute.pif

Comment # 11 on 10 March 2005 at 22:06 by Anonymous
I have this msn worm on my college laptop....thats even worse. has all my stuff on it and i cant get rid of the damn worm. i pulled the cable modem so its not going on the inet anymore..... weird too. out of nowhere i got it while playing a game

Comment # 12 on 15 March 2005 at 11:03 by Anonymous
i unfortunately accepted a file called, "mona lisa wants her smile back" n it was from my girlfriend msn account. but it wasnt from her but just randomly sent to me

Comment # 13 on 20 March 2005 at 13:46 by Anonymous
this worm is the biggest pain in the arse eva !!

Your Verification Number:


Please enter your Verification Number: