- This topic has 6 replies, 4 voices, and was last updated 19 years, 5 months ago by
.
-
Posts
-
my Yahoo has been sending out the following messages automatically..the same shows as my status message:
please do not open the
Just check out my new personal website :
wtf is this ? Wanna give me a **** ?
making money online never be easier :
cool girls :
A new dangerous computer virus that can destroys all your data has just been released . Click here to know how to avoid it :
Let’s vote for Miss Vietnam – Mai Phuong Thuy – for the upcoming Miss World championship :
Please DO NOT CLICK any of the links above.
They have a Trojan attached to them and shouldnt have been posted as a whole intact.
xXx_17, Could you edit the Link so it doesnt direct to a Trojan, Thanks
Thanks for the heads up Dermot!
And xXx17, your computer must be infected with something so try scanning your computer to see if anything comes up. Also run programs like Ad-Aware and SpyBot Search&Destroy to get rid of all the bad things that may be on your computer.
Please don’t link to the direct virus the way you did in the future. When you do that you just help the virus/worm spread further because people don’t read the “Don’t Click the Following Link” part.
And please be sure to let us know if the scans bring up anything!
I wanna add one more thing xxx that your yahoo does not have a problem and your yahoo does not sending you a message.It is the bots insides the room that sends you a message and give you a link which may contain viruses.So as sugeested by dermot and jealousy plz do not click any of these links.
shergill;207451 wrote:I wanna add one more thing xxx that your yahoo does not have a problem and your yahoo does not sending you a message.It is the bots insides the room that sends you a message and give you a link which may contain viruses.So as sugeested by dermot and jealousy plz do not click any of these links.xXx stated that her messenger is sending the links for her. Not that she is receiving them. So it has nothing to do with bots sending her a link. She also mentioned it’s on her status, so she might be infected with something.
But we suggested not clicking on the links to everyone here on the forums because she had pasted them here, and they took you directly to the virus, so that’s bad… (so i removed them.)
More than likely it is a somewhat Messenger worm.
More than likely it has pmed everybody on your buddylist with the link and if they clicked it they would be infected with it also as the trojan is Download.AB which download the code and executes it on a system without a decent antivirus and just send it out again, the vicious circle of worms.
Would be wise to tell your friends to not click any links from your id.
Update your anti virus and do a complete system scan.
I can tell you as a NOD32 user, it picks up the Trojan.
It is the trojan whose descrption is here:-
It is the work of AutoIt.X, a variant of AutoIt, is a Trojan. AutoIt.X attempts to download and install other malware to the system and copies the file taskmng.exe to the Windows folder and creates a Registry key to start the file automatically.. AutoIt.X changes startup and search pages of Internet Explorer.
AutoIt.X may arrive on the system as a downloaded file via links that are spammed through Yahoo Messenger. The links have malicious Java scripts, which contain exploit code to automatically execute AutoIt.X on vulnerable machines. It exploits a vulnerability in Internet Explorer that allows remote code execution in the ADODB Stream object in ActiveX control. The malicious Java scripts are detected as Exploit.JS.ADODB.Stream.e.
To remove and for more information about this virus check this link:-
F-Secure Trojan Information Pages:AutoIt.XTrojan AutoId.D also do the same thing.
For that check:-F-Secure Trojan Information Pages:AutoIt.X
I forget to include these virus that is also send by the yahoo messenger….
W32/YahLover.worm…….This worm spreads by using Yahoo messenger. It sends out download links to all the members in the Yahoo buddy list. Once the link is clicked it uses VB script to download and execute the worm on victim’s machine.
The worm changes the custom “away” message in yahoo messenger to point to its download location.A message window automatically appears at frequent interval of times containing the download link.The worm spreads through passing malicious link to all user names listed in yahoo buddy list.
It sends link like
The URLs pointed by the registry vary with diferrent variants, some of the URLs are* http[dot]//VuiVeVN.HP[blocked]
* http[dot]//minhnhut.[blocked]Check this link of McAfee about this virus:-
I hope this will make you happy by removing the trojans.
- You must be logged in to reply to this topic.