28 Oct 2005
AOL’s instant messaging service has been hit by a virus which downloads spyware onto computers via a special website.
The virus spreads via messages on AOL’s AIM software, either saying HILARIOUS!!! Or see thing!!!, with a URL. Clicking on the link takes the user to a web page that attempts to download a Trojan onto the computer using patchable flaws in the browser.
“We have seen several versions of the URL,” said web monitor Websense, which issued an alert about the virus.
“Some are up and some have been taken down. All have been hosted on personal web pages at ISPs, have had the extension of ‘.com’, prefixed by ‘~username’, and either ‘image’ or ‘pic’, followed by a number and extension.”
Once installed, the Trojan then modifies several registry items, adds a browser helper object, and installs several pieces of spyware. It also connects to more than 10 different websites to download and install other Trojan Horses and pieces of spyware.
AOL has become a regular target in recent months. Last month it was hit with a phishing scam, although the company claims that no information was stolen.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Hands on with the highly anticipated Android 4.0 Ice Cream Sandwich hybrid tablet
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Desktop Support Manager 3 month contract - to start...
/ Programme Manager / 45k / Significant benefits / London...
Automation Test Manager Selenium London 75k Automation...
Mitel 3300 Engineer Key skills Mitel 3300...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
CLEAN OUT YOUR AIM VIRUS
In response to the first comment, it is infact a virus, or 'worm' that is undetectable to virus scans. The worm penetrates into your files through your AIM program. But no worries, there's a quick fix. http://www.jayloden.com/AIMFix.exe
Posted by: Megan 26 Nov 2005
like to report a site
i got one of these and spent 5 mins removing it, it asks u to download a file, then creates one called lockex.exe and it attempts to reach the internet, luckily zone alarm may block the file from connecting. hijack this may remove it too by just a simple few clicks
Posted by: anti-hacker 30 Oct 2005
AOL or Windows problem
Is this an AOL problem or another faulty Windwows problem?
Posted by: user 29 Oct 2005
Umm...
AIM has been hit by no virus. It's not a virus at all, nor is it anything that's affected the IM service. It's the fault of the idiot user who doesn't check links before clicking them and watch what they're downloading/installing.
Posted by: D14BL0 28 Oct 2005