Shoutbox

well i haven't got it (i hope ) but i keep getting links looking like

*cough* http://www55.im-profile.com/member.php?msn=YOU@REMAIL.HERE

which as you to download a .com file so dont accept it !!

well that was a quick post, as i just got that like 10 mins ago. though i knew not click it

I tried the link, and it sent me an executable file, as expected. I edited the post so the link isn't clickable anymore...

code:

---

67.15.157.175

HTTP/1.1 200 OK
Date: Sun, 18 Mar 2007 20:48:10 GMT
Server: Apache/1.3.37 (Unix) ...
Content-Disposition: attachment; filename="test@example.com"
X-Powered-By: PHP/4.4.3
Content-Length: 76288
Connection: close
Content-Type: application/octet-stream

---

quote:

---

Originally posted by ayjay
page no longer working

---

quote:

---

Originally posted by effection
http://www55

---

did you watch out for that?

oh yes sorry i forgot that would actually be a link...

is there anyway i can download this file without becoming infected i want to open it up in IDA

Err... if you don't execute it you are safe =/

quote:

---

Originally posted by .OxY

quote:

---

Originally posted by ayjay
page no longer working

---

quote:

---

Originally posted by effection
http://www55

---

did you watch out for that?

---

Maybe...

quote:

---

Originally posted by Voldemort
Err... if you don't execute it you are safe =/

---

are you sure? i dont want one of these self executing type buggers

i could do with a virtual machine

quote:

---

Originally posted by effection
oh yes sorry i forgot that would actually be a link...

is there anyway i can download this file without becoming infected i want to open it up in IDA

---

Do you know reversing????Good work...if you want i can reverse this exe and tell you what you want know but i can't get the exe you have posted...It seems to be down

Hello everyone, i saw this thread and joined the forum immediately because i have the exact same problem!!! My home computer automatically sends this message to everyone online on my live messenger contace list:

*cough* " followed by " member.php/?msn= " and after the = sign, it says your e-mail or sign in name, so for me it would say:


Vinnie Says:
*cough* member.php/?msn=mastersoulkeeper@hotmail.com

here is a link to a pic of the download...

http://www.poolofnewpeople.com/virus1.jpg

here is a link to another forum where im trying to figure it out.

http://www.ttlg.com/forums/showthread.php?t=112721


I don't want to re-format my computer so i'm gonna fight until i find out where the active file is on my computer, then im gonna destroy it and post how and where to destroy it. And thanks for any future help!