New AIM worm???

[alexjohnson16]

in addition to RealPHX and Talkstocks... I'm now seeing a BuddyPicture.net thing going around...

a few of my friends have it and they need help gettin rid of it but after a google search with no results I have no clue where to start...

anyone have any info on this one???

TIA

 

[hdeck]

a few of my friends got this one too. luckily i was warned before clicking the link

 

[TheVrolok]

I love knowingly clicking on these links and getting a "Your browser is not WIN32 compatible" error. Mmmm.. Linux desktop.

 

[z0mb13]

I use trillian, does the worm also affect me??

I think I saw that pop up screen too..

 

[imported_Pablo]

Originally posted by: TheVrolok
I love knowingly clicking on these links and getting a "Your browser is not WIN32 compatible" error. Mmmm.. Linux desktop.

... vrolok returns to pleasuring himself to nudie penguin pics....

 

[guapo337]

Originally posted by: PabloMartinez

Originally posted by: TheVrolok
I love knowingly clicking on these links and getting a "Your browser is not WIN32 compatible" error. Mmmm.. Linux desktop.

... vrolok returns to pleasuring himself to nudie penguin pics....

w3rd.

 

[PoPPeR]

i see it in a couple of my friends profiles lol

 

[minus1972]

when will they learn?

 

[TheVrolok]

Originally posted by: PabloMartinez

Originally posted by: TheVrolok
I love knowingly clicking on these links and getting a "Your browser is not WIN32 compatible" error. Mmmm.. Linux desktop.

... vrolok returns to pleasuring himself to nudie penguin pics....

mmmm Tux you're soooo good to me

 

[EmperorIQ]

wait, so a text pops up to you as a aim window and you click on the link in order to get the worm? how is this done?

 

[NikPreviousAcct]

I would also like to know.

 

[VRmaster69]

Me too, sounds interesting

 

[chiggachu]

my sister just got this on her computer and she's freaking out. the link apparently points to http://www.talkstocks.net, but i'm too scared to navigate there!

 

[virtueixi]

Originally posted by: chiggachu
my sister just got this on her computer and she's freaking out. the link apparently points to http://www.talkstocks.net, but i'm too scared to navigate there!

Someone go!!

 

[rutchtkim]

FIXED

 

[jonmullen]

is it just an IE thing?

 

[Ness]

Originally posted by: virtueixi

Originally posted by: chiggachu
my sister just got this on her computer and she's freaking out. the link apparently points to http://www.talkstocks.net, but i'm too scared to navigate there!

Someone go!!

I did. It asks you install a bunch of crap but I didn't. Once you get past like.. 10 different install prompts.. there is a link for the uninstaller.

 

[Kev]

how the hell does this thing install? i selected no when that stupid install software popup came up

 

[Ness]

It won't install if you select no for all of them... and refuse to download any of the crap that come up automatically... and then refuse to install some more stuff... and some more...

 

[Kev]

well i selected no a couple times, then got annoyed and just killed IE, it still installed

 

[pillage2001]

I'm logging off and hiding under my bed. The world is no longer safe.

 

[Soccer55]

Originally posted by: EmperorIQ
wait, so a text pops up to you as a aim window and you click on the link in order to get the worm? how is this done?

From what I understand, if a person's computer is infected, their profile will be erased and you will see a link in the profile for realphx or talkstocks. I think the realphx one is just a straight up link that even says realphx dot com, but the talkstocks one says something like "look what I found, click here". When you click on the link, your profile gets erased and the link is inserted into your profile. I think the worm actually changes one of the ocx files or creates a registry entry or something because the link will come back if you simply delete it out of your profile.

-Tom

 

[Soccer55]

I can take a screenshot of realphx and/or talkstocks for everyone using Mozilla if anyone can tell me whether or not it will mess with gaim/Linux.

-Tom

 

[gopunk]

Originally posted by: Soccer55

Originally posted by: EmperorIQ
wait, so a text pops up to you as a aim window and you click on the link in order to get the worm? how is this done?

From what I understand, if a person's computer is infected, their profile will be erased and you will see a link in the profile for realphx or talkstocks. I think the realphx one is just a straight up link that even says realphx dot com, but the talkstocks one says something like "look what I found, click here". When you click on the link, your profile gets erased and the link is inserted into your profile. I think the worm actually changes one of the ocx files or creates a registry entry or something because the link will come back if you simply delete it out of your profile.

-Tom

is it like "i can't believe i found *insert your username*'s picture here! hahaha"?

 

[Kev]

Originally posted by: gopunk

Originally posted by: Soccer55

Originally posted by: EmperorIQ
wait, so a text pops up to you as a aim window and you click on the link in order to get the worm? how is this done?

From what I understand, if a person's computer is infected, their profile will be erased and you will see a link in the profile for realphx or talkstocks. I think the realphx one is just a straight up link that even says realphx dot com, but the talkstocks one says something like "look what I found, click here". When you click on the link, your profile gets erased and the link is inserted into your profile. I think the worm actually changes one of the ocx files or creates a registry entry or something because the link will come back if you simply delete it out of your profile.

-Tom

is it like "i can't believe i found *insert your username*'s picture here! hahaha"?

yes