A new messenger worm!

[Cypher-]

Thought I had better alert all the people who use MSN Messenger about this so none of you get caught out.

A new worm is spreading rapidly through MSN Messenger via IM messages that look like this:

"lol I just updated my Messenger and I must say IT ROCKS!! www.ultradd****/msnplus8final.exe"

"Want more msn emotions? www.ultradd****/msnplus8final.exe"

"dude, this is awesome a must see! www.ultraddl****/msnplus8final.exe"

"Hej, did you download the new MSN yet? www.ultradd****/msnplus8final.exe"

"lol, this is awsome... www.ultradd****/msnplus8final.exe"

"lol check out MSN Plus...it ownz! :o"

(I censored the URL's ****)

Ignore at all cost!

UPDATE: This worm is dubbed W32/Antix-A by Sophos and when first run it copies itself to System\[random new folder]\kernel32.exe (the folder name can be anything, like bpzjkwrdd). W32/Antix-A will attempt to disable Anti-virus and firewall processes and services. The worm includes functionality to silently download, install and run new software including an update of itself, initiate a proxy server on the infected computer, steal passwords and act as a flooder.

Ignore anyone who claims to have MSN8 as it is probably this file, it can be ran by other user's other than the creator's ident or server so be warned.

Thanks to a buddy who works on mess.be for this info :)

[Clarissa]

okaii i have seen a few. they are very surspicious.. im carful what links i go on :D thanks for that warning tho

[Cypher-]

It isnt sent by a link :s It is sent through messenger, which is why Im stressing that if one of your friends or people on your list claim to have MSN8 do not download it from them.

[Clarissa]

oh i get these ones saying.. for example "have you seen this new program...www.thisisavirus.com" like that in a IM convosation.

[howdy]

A few of my friends have the ''I can see whos blocked me, www.block-checker.com'' or something.

[Cypher-]

Theres a plugin that includes that which is actually clean, I cant advertise it here though sorry but its a nice plugin for Messenger which makes it safer for you to chat and also gives you a slight advantage on mess

[Mentor]

annoying the vunrablty where people can unknluingf send stupid ims "/

just wondering what differnce does it make if your "buddy" works for mess be anyone who looks at the site could read it, and its been there quite a while, so its not like your "buddy" gets stuff early "/

[april]

I shall watch out for these new worms then.

[Tommy]

A few of my friends have the ''I can see whos blocked me, www.block-checker.com'' or something.

I believe that one is real, or i think it is, i clicked on it, but luckily my computer wont let me click on links from msn.

[Eamonn]

thats old it was on mess.be like a year ago

[kasi]

Thank you ;D Didn't know how it was getting around. You get rep for this. ^_^

[Cypher-]

Its an updated version eamon as MSN8 wasnt heard of a year ago :)

[Rou]

And If Some Says Why are You In The Staff List at This Perjam Site Its A Logger Btw

[Cypher-]

And If Some Says Why are You In The Staff List at This Perjam Site Its A Logger Btw
What rubbish are you on about :s What is a logger? The thing im warning about is a worm sent via IM convo's :s Dont comment or criticise things you know nothing about please.

[Tommy]

logger = keylogger

[Cypher-]

logger = keylogger
I know that, I mean what is he going on about a logger for? :\

[Tommy]

he is saying this site there giving out is a logger, basically meaning the site downloads the logger onto youre computer without asking for permission.

[Cypher-]

The site which I have filtered is the one which gives out the worm, which is what im trying to warn people against :s When he doesnt make sense he is confusing.

[Clo]

He is making sense.''/ Clearly.

[zak-x]

Thank you for the warning cypher

[Metric.]

Thanks to a buddy who works on mess.be for this info :)

Mess.be is full of virus's. I got some sort of trojan horse from downloading MSN 7.0 off of the website and the file was corupted, like most of the files '-.-