OPREZ - opasni crv(worm) kruži IM mrežama (MSN, AIM i ostale)

[Datachi]

već sam od 3 kontakta dobio .zip fajl sa naslovom photos, uz koje je na jednoj poruci bio čak i tekst ''just photos of me''

uglavnom, budite oprezni , ako ga otvorite, automatski će slati taj isti ''zip'' vašim
msn kontaktima.

[fred]

Pravi autor: Datachi

već sam od 3 kontakta dobio .zip fajl sa naslovom photos, uz koje je na jednoj poruci bio čak i tekst ''just photos of me''

uglavnom, budite oprezni , ako ga otvorite, automatski će slati taj isti ''zip'' vašim
msn kontaktima.

jako naporno. prijatelj mi je otvorija i meni su svako malo dolazile sa njegovog accounta poruke sa .zip fajlom.

to mi je prvi put bija da san ima takvih problema priko msn-a. inace su mi ljudi slali svakakve gluposti da postoje razni virusi koji kruze msn-om, tipa: nemoj pustat vise nikog u kontakte s yahoo-a jer ce ti upast virus i izbrisat sve iz kompa. uglavnom je rezultat bija njihovo blokiranje...

[Fearless Mastermind]

Ja stalno dobivam od jednog kontakta tu poruku,jednom mi je slao i taj file,ali se bio disconnecto pa se prekinulo!

[silence]

Windows Worm Uses BitTorrent to Propagate | TorrentFreak

nije samo preko MSN-a .. treba pazit ....

It’s controlled by a remote user over IRC, and is capable of sending itself via AIM and MSN, storing itself as a file called IMG009.jpg-www.imagehosting.com inside a zip file called C:RECYCLERmyphoto.zip, and then sending this zip with a message that promises pictures, written in the same language as the infected computer. This sort of social engineering tries to maximize the chance that recipients will believe it to be legitimate and open the attachment, though this is shot in the foot somewhat by the fact that many of the the phrases have been cut off abruptly.

razina sofisticiranosti ovog crva se vidi i po tome kaj se služi torrentima sa daljnje širenje ...

I have personally seen the messages generated by this worm, when a Yahoo! Messenger-using friend of mine asked me to visit some obscure URL to look at her photos. She uploads all her photographs to Facebook, so I became suspicious right away. It turns out, this worm is so versatile, it can hijack just about every popular IM client and use the signed in account to spread to its contacts. What’s very interesting, though, is how the worm utilises BitTorrent.

Once running on the host computer, the worm searches for the BitTorrent mainline client executable (bittorrent.exe). If it finds the file, it opens up a torrent and, after downloading a copy of itself to a specific location on your hard disk, starts seeding it.

This is the first reported instance of malware making use of BitTorrent to achieve its creators’ ends. If you think about it, it makes perfect sense. Why should the malware author waste bandwidth downloading his worm to thousands of Windows computers around the globe, when he can make his army of zombified ones redistribute it for him, free of cost?

BTW :: promjenio sam ime teme, da dobije točniji opis ...

[Datachi]

Pravi autor: silence

BTW :: promjenio sam ime teme, da dobije točniji opis ...

ok, ionako sam malo neupućen u to

[laaCoo]

buraz mi je otvorio taj zippan file, i kak da se rijesim te gamadi sad ?

[Datachi]

pa jednostavno zamoli brata da ode. ima završenu školu? može naći posao?

[laaCoo]

hvala na savjetu, jednostavno sto mogli reci kak se zove taj file u processu tak da ga se moze naci i ubit, tj obrisat

[Datachi]

probaj nod32

[Vex]

Evo, napokon je i meni to neko prek MSN-a poslao, jeaaaaaa

Uglavnom NOD ga prepozna i miče ga, tako da se uopće taj fajl ne inicijalizira, dakle koristite NOD za sigurnost

Naravno, to je moja preporuka, ne koristim druge programe, pa tako da neznam dal oni djeluju