Msn Messenger Photo Album Virus!

Information on the Virus and how it works….just to make urself smarter ^.^

Some reports that a file “photo album.zip” is spreading quickly via MSN messenger now. We have confirmed that it is a variant of Backdoor.Win32.IRCBot. If someone receives messages via MSN as following,please don’t open it.

HEY lol i’ve done a new photo album !:) Second ill find file and send you it.

Hey wanna see my new photo album?

Hey accept my photo album, Nice new pics of me and my friends and stuff and when i was young lol…

Hey just finished new photo album! might be a few nudes lol…

hey you got a photo album? anyways heres my new photo album accept k?

hey man accept my new photo album.. made it for yah, been doing picture story of my life lol..

In the .zip file, there is a file “photo album2007.pif“, 18,944 bytes, packed with UPX, Kaspersky detects it as Backdoor.Win32.IRCBot.aaq.

Upon execution, this ircbot drops a copy.

%windows%\photo album.zip

And drops a .dll file, inserts this .dll file into Explorer.exe.

%system%\rdshost.dll

Note: Almost Half of my contact lists have gotten this virus…haha how should i say this…i feel that there are many Perverts in my msn contact list….haha im sure yours would have many perverts too….ahaha Perverts and Photo Album do go well together….

The Fix: Download Free anti Virus from my downloads Section www.dexxdownloads.blogspot.com

http://www.feedmap.net/blogmap/blogapi.ashx?method=blogmapbadge&feed=http://www.dexxter.co.nr/feed.rss

~ by dexxter on April 1, 2007.