Worm Targets Outlook, AIM Users

[Mysterious Benefactor]

Worm Targets Outlook, AIM Users

Security software maker Symantec is warning of a new worm that uses the blended-threat technique found in other recent worms. The worm comes in two forms, W32.Aphex@mm and W32.Aplore@mm. Its primary function is to mass-mail itself via a Microsoft Outlook address book, but it also uses IRC and AOL Instant Messenger (AIM) to propagate.

For details on how the worm works and what to do about it, click here

[Patti Feinberg]

I tried to read the article; but there was some strange advertisement (and there was no way  to close it).
But thanks MB

Patti

[Mysterious Benefactor]

Well, the most important parts of the article are these:

"The e-mail attachment that spreads the worm via Microsoft Outlook has the following name: Psecure20x-cgi-install.version.6.01.bin.hx.com. The subject line and body of an infected message will contain a period only-no text.

and

"If an infected machine connects to AIM, the worm sends one of the following one-line messages to AIM users listed as contacts:

* btw, download this
* I wanted to show you this
* please check out
* hey go to
* see if you can get this to work
* this is cool
* tell me what you think about
* try this
* I almost forgot about
* I like this
* What about
* Have you seen
* Interesting
* lol
* wow
* whoa
* neat
* cool
* hmm
* psst
* hehe
* haha
* silly
* weird


So, if you get a strange message from one of the friends you regularly talk to through AIM telling you that they received one of those messages from you and you know you didn't send it, your computer has probably been infected.

[Cassandra]

Thank you MB!  Unfortunately, for me it was too late and someone on another board had sent me the "Have you seen" one.  I had to re-install windows and AOL after that. Now, Im being more careful with who and what I open mail from.  Thank you for the list!