aim away message takeover

  • Thread starter Thread starter LHabel
  • Start date Start date
L

LHabel

Our computer is showing signs of infection with aim. The away messages of
my kids are being changed to "OMFG
http://www.shadowedstories.org/bestfirends.scr!!!!!!"

They tried changing their passwords, no luck.

Seems to be ok on one computer, but not the other. Virus scan turns up
nothing. Happens to all log ons on that computer (when signed in on
multiple xp accounts).

I searched Symantec and AIM but find nothing on this.

Anyone know what this is?
Thanks.
 
Our computer is showing signs of infection with aim. The away messages of
my kids are being changed to "OMFG
http://www.shadowedstories.org/bestfirends.scr!!!!!!"

They tried changing their passwords, no luck.

Seems to be ok on one computer, but not the other. Virus scan turns up
nothing. Happens to all log ons on that computer (when signed in on
multiple xp accounts).

I searched Symantec and AIM but find nothing on this.

Anyone know what this is?
Click to expand...

A worm. :)

First of all did you copy and paste that URL - there's nothing at the
location as written but I did find a file at
http://www.shadowedstories.org/bestfriends.scr This file is
identified by KAV as SdBot.gen.
"OMFG http://www.shadowedstories.org/bestfirends.scr!!!!!!" may be the
text of the link, but that says nothing about the target. Is
http://www.shadowedstories.org/bestfriends.scr the target of the link?
 
Back
Top