MSN Virus

Ephracis · 05-05-2005, 08:33 AM

I keep getting messages on MSN from people saying:

Quote:

i found a pic of you!
http://ravo.adamg.cc/security/album....ourceforge.net

(note: it seems strange that swedish people on my list would write in english to me)

I checked out the url and firefox asks me if I want to download the binary file unknown@hotmail.com from ravo.adamg.cc.

Just wondering if anyone has heard of this, because I searched at google but did not find much. I thought that I may be a virus, but I would like some info on it.

trevelluk · 05-05-2005, 08:38 AM

It sounds like it might be some sort of virus or other nasty. I suspect that if you were on Windows and using the offical Messenger client and Internet Explorer, you would have been in trouble.

frob23 · 05-05-2005, 08:50 AM

http://www.trendmicro.com/vinfo/viru...LVIR.Y&VSect=T

This looks like the following worm (or a variant of it). The binary file you would have downloaded has instructions in it to install a RAR extractor (if you don't have one) and extract a rar contained in the file. It could have been doing other stuff as well -- I'm not on a Windows machine and have little experience breaking down stuff like this (nor did I spend much time investigating this fully). The RAR appears to contain that worm... which would have your client sending out the same message to people all the time.