AIM users be careful

AIM worm plays nasty new trick
It installs a rootkit. Rootkits are nasty. Rootkits hide deep in the OS where they can’t be seen. You don’t want one because if you have one they are difficult to find.

Practice safe computing. Don’t click on unknown links in any IM program. If someone you know sends you an unsolicited link then write them back to confirm that they actually sent it to you.

By staying patched and being smart you can avoid these things.

So it will only install IF you click on the link?

yeah
filler

I’ve already fallen prey to this I think…luckily my virus scanner picked it up, but I still automatically sent it to every person on my buddy list that was online. Always check a link before clicking on it.

http://gaim.sourceforge.net/

open-source is a happy source.

EDIT: Oh, and I’ve noticed that these links to “A PICTURE OF BLAH” and end in .com (not as in the domain, but as in a *.com file [batch file])

It’s fun running viruses under linux… They tend to give weird error msgs :wink:
Also, because Linux generally has a different Window style, when those pop-ups appear saying “Your Computer may be at risk! Click “Ok” to scan!” and it looks like an XP window, you know it’s suspect. And you can click to see what happens (One once claimed to scan my registry and find virii… it was funny ;))

Oh yeah, and GAIM rocks…

I’m TOTALLY with you, evil-nick! I wonder how many Linux users there are out there that unicycle?..I expect more than just those who view this forum are capable of riding a unicycle (ex#1: My Calculus teacher doesn’t use this forum, but he can ride a unicycle)

I use Slackware 10, btw (kde 3.2 is too…bright/bubbly, for my liking. 3.1 is “just-right” (like little red riding hood’s). I use gnome 2.x under Slackware 10, for those interested.

I no this is stupid but what is linux and gaim?? please explain

Iv had this sent to me by tons of people, most on my buddie list because thier account gets hacked. I have aol so it tells mebefore it downloads it, so i just say no to the download if i click the link.

Linux is a different operating system than Windows… more like Mac OSX… but not Mac. GAIM is an instant messaging program that lets you connect to AIM/ICQ, MSN, and Jabber users (and others also, I just forget which ones ;))

The BUUC has many Linux users, at least four, with at least 3 other members who use Linux at school if not at home.

I personally am using Ubuntu 5.10 on my laptop and desktop. I’ve used 4 different flavors of RedHat, 2 of Fedora, Gentoo, Slackware, Peanut, Vector, Damn Small Linux, Knoppix, Gnoppix… I used Redhat the longest, I think I’m gonna stick with Ubuntu for a while now.

There are bunches of AIM and IM worms. Most rely on the same idea of sending you a link from your friend’s buddy list to make it look like he/she sent you the link. That makes it more likely that you’ll click on it cause it’s from someone that you know. Only problem is that your friend was friend’s computer is infected and it was their computer that sent the link, not your friend.

Usually these worms will install spyware and/or some sort of backdoor so they can turn your computer into a zombie. This is just your standard spyware and backdoor stuff. This new one installs a rootkit which is much more difficult to find and remove than the standard spyware and backdoor stuff. It’s the rootkit that makes this worm much more worrisome. If you get a rootkit, and you are able to identify that you have a rootkit installe, your best solution to get rid of it is to format the drive and reinstall the OS.

Be smart about what links you click in any IM program. Trust me, you don’t want a worm that installs a rootkit.

Wikipedia: Rootkit

And Linux has rootkits too. :stuck_out_tongue: