Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Worm Chats with Users on AIM

Posted by CowboyNeal on from the talking-it-up dept.

goldseries writes "CNet is reporting that a new IM worm chats with users to get them to down load a file containing a virus. The virus replicates its self and sends its self out to user's buddy lists. The virus will reply 'lol no this is not a virus.' The virus hides users from seeing the messages sent out to members of their buddy list. Viruses are evolving; now they will even talk to you."

3 of 577 comments (clear)

  1. Re:lol no this is not a virus by prionic6 · · Score: 5, Informative

    This will come in to you from another AIM-user you KNOW and who is infected. Not some stranger.

  2. Note by Sheepdot · · Score: 5, Informative

    Note: The slashdot article says 'lol no this is not a virus.' The CNET article says "lol no its not its a virus".

  3. Uhh... Windows DOES have the Execute "bit" by AKosygin · · Score: 5, Informative

    On NTFS formatted filesystems, you can use the ACL to default set it so that all files saved will not have the "Execute File" permission. You just deselect "Allow" for the line that says "Traverse Folder / Execute File" for the "CREATOR OWNER" entry and "Apply onto" "Files Only" for the scope and allow propagation down.

    Or, you can go into your Group Policy Object (Local Computer or Domain) and by default in your Software Restrictions Policy disallow execution unless they were in areas of the file system you designate, I.E.: "Program Files" folder. And if I remember correctly, saved files from current versions of IM programs are saved in "My Documents" outside of the "Program Files" folder by default.