YM Virus or online prank?
(UPDATE) I was pointed to this website and article. Apparently, there is really a worm going around using the instant messaging applications like Yahoo! Messenger. The virus is called Sohanad and it has spawned variants.
This worm arrives as a downloaded file of VBS_ADODB.AE and JS_WONKA.N.
It spreads via the instant messaging applications Yahoo! Messenger, AOL Instant Messenger (AIM), and Windows Live Messenger. It sends an instant message to all contacts of an affected user. The said message contains a link that when accessed, downloads and executes a copy of itself.
Yugatech recently wrote that a supposed Yahoo! Messenger virus is on the loose, perhaps infecting some innocent users. But I’ve done some online research and found some anecdotal evidence. I’ve also looked at some anti-virus websites, and found this on Trend Micro:
Yahoo Instant Messenger Hoax
Description:
This hoax spreads via both email and Yahoo! Messenger (YM), the instant messaging service from Yahoo!.It advises users to be wary of IM messages from specific YM accounts. It claims that files from these IM messages are viruses.
This claim has no factual basis. Users are encouraged to ignore these warnings.
Original Message:
If somebody by name dvorak@yahoo.com adds you. dont accept it. Its a virus. Tell everyone on ur bulletin because if somebody on ur list adds them, u get the virus too. Tell everyone on your list not to open anything from angell11, tewwtuler, and sassybitch. It is a hard drive killer and a very horrible virus. pass this letter to everyone on your buddy list. We need to find out who is really using these accounts. Sorry for the inconvienience. Sincerely, Director of Yahoo Services, tanwir2001.Right click on the group name of your buddy list and click Send Message to All
yuga wrote:
Mine’s a little different. Some of them messages goes like this:
“you are infected. Use this tool to remove the virus from your PC: http://myglobal-news.com?id=virus_shield”
“look at my new lover : http://mytermex.com/darling.jpg”
oh my god. i’ve won a 2000 usd lottery. http://nsl-school.org?id=wining_list. Come to my house for a party tonight!!!
Just don’t click on the links if you’re not running Firefox.
Posted 28 Oct 2006 at 10:23 am ¶
Jamz Yaneza wrote:
In reality IM viruses and worms shouldn’t be surprising, as this vector of propagation is almost as instantaneous as email. We’ve seen a rise in the past few weeks. See - http://www.integratedmar.com/flod/story.cfm?item=112
And in other news last year, we provided major inputs for this report - http://www.leavcom.com/ieee_july05.htm
Cheers!
Posted 28 Oct 2006 at 11:02 am ¶
Cyberbaguioboy wrote:
Thanks Abe, Jamz for the additional information. I just downloaded Kapersky AV and found at least 8 more viruses hiding in my system. sigh.
about this IM virus, I think many people in my contacts had been infected lately. They’ve been sending me similar messages too.
Posted 28 Oct 2006 at 4:47 pm ¶
Eliel wrote:
hi. i stumbled upon your blog while i was searching the net about this new IM virus. I noticed that some of my friends were already infected and they’ve sent me a lot of these messages that include the links.
that Trend Micro entry about the IM hoax is a different issue. Its intent is to spread panic on YM users and there’s no real threat.
However, this new one with the link to a virus poses a big threat.
My tip, for those who aren’t infected yet: use Mozilla Firefox, and install the NoScript extension. That’s to make sure that scripts coming from unknown sites are blocked.
For those who are already infected, get Spybot Search & Destroy.
Posted 03 Nov 2006 at 10:21 pm ¶