Shoutbox

It's a new virus people, somebody kept sending me the link last night, I know that it's not there fault, but it's becoming a major hastle, it looks like somebody has created another worm, it says '~Leach', then gives you a link...

If you receive any random links that say something like "leach" in it, then DO NOT click it!...


Here is the chat log of the person who was sending me the links ...:

quote:

---

Originally posted by Virus Conversation
[13:46:38] im adorable : n=leach
[14:11:46] im adorable: http://subdomainremoved.animedb.com/script.php?da...orum&section=leach
[14:11:49] Luke - "Grow:
[14:12:32] im adorable : i know
[14:12:42] Luke - "Grow:

---

no i havent got smiley central or anything and nope dont get an error.... its just when im talking on msn it will open up all my contacty who are online and then send them the link

traxor... thats the one ive got!

I know, I don't think that it has been around for very long, and there isn't any security definitions, I've sent an email to the owner of animedb:

quote:

---

Originally posted by email i sent
To Whom it may concern,

I am not blaming you for this matter, as it may not be you that is responsible for this crime. One of the subdomains for your website contains some malicious content, a worm, that is going around MSN Messenger at the moment, it is putting millions of users of MSN Messenger at risk, unless you remove this subdomain, therefore, preventing any further attacks on the computers of innocent MSN Messenge users.

The worm in question is similar to the worm that was going around MSN Messenger in the previous months, with the extension of .scr, .exe & .pif; it attaches itself to MSN Messenger, and sends a message to every user on MSN Messenger saying the following:

[13:46:38]im adorable: n=leach
[13:46:38]im adorable: http://freezoe.animedb.com/script.php?data=forum&section=leach

As you can see, the subdomain is clearly one of yours, so I would advise you to remove the subdomain before further action is taking, it is just a forewarning, as I cannot take action, but I'm sure Microsoft would, I am advising Microsoft of this matter and will be forwarding them this email that I have sent you.

Please reply as soon as possible.

Yours faithfully,

Luke J.

---

Hopefully, they will remove the subdomain before any other damage is caused, as said, I will contact Microsoft, and will also contact Symantec.

cheers. hopefully something will happen soon. thanks again

That's okay, have you downloaded all of the latest definitions for your anti-virus software and ran a thorough scan of the whole computer?

yea. nothing shows up on my virus scanner.

I have just tested the link using a piece of software, and it tries to download "look iamflying.exe". So if anybody sends you that file, then do not accept.

quote:

---

Originally posted by hecks
yea. nothing shows up on my virus scanner.

---

I am not surprised, I really don't know what you could do to try and get rid of the virus...

if its a worm then a worm works like this, it goes thru ur network holes to replicate itself and then goes to another user and so on replicating itself many times...deletin the subforum will only get rid of the download action but not the link itself as the worm is in ur computer..if u have a good virus protection the go on their website and look for maybe updated virus definitions..or maybe they have something about deletin the virus..

good luck