Forums Forums Enthusiast Forums A - Z Gadgets & Tech New MSN virus: IMG-0012.zip

Details of this virus:
IMG-0012.zip (img0012-www.photostorage.com)
Size: 25,600 bytes
MD5 hash: d799d8ffd0c98af60507b98e2961b826
Detection: Backdoor.Win32.SdBot.bxr (Kaspersky)
( http://www.cisrt.org/enblog/read.php?162 )


Quote from someone who has it:

"My computer is infected with virus that I got from the msn messenger.

Information about the virus:
-The virus is showing in the messenger the following sentence:
“wanna see the pics from my vacation? “
-the virus is leaving a dump in the in c:\windows as a zip file pict-xxxx.zip for example: “pict-8439.zip” when unzipping it : img0012-www.photoshare.com

I read about this virus and I was told to delete it from the registry"

Quoted from: http://answers.yahoo.com/question/index?qid=20070929083037AA1VBBL

How to Remove!

Lol hardly an MSN virus, you have to accept any file that is being transferred, so any file transferred can potentially contain a virus

yeh but still once u open the file it gets sent to all ur contacts an then once
they open it spreads to their all their contacts.

You have to be stupid enough to let it through tho lol.

POMP------>


MATTY---->

ye but still lettin peeps know the warning lol.
I had one through b4 sayin: Is it you??? cant remember who sent me it...

So i downloaded it scanned ir for viruses an nothing came up so i unziped it
an the file looked dodgy so i deleted it.

Then did a search on google, typed in the name an then add "virus" then i found websites about it.

Simple: Only have people on your list who you know and trust, and only accept files that you know what they are. If in doubt, ask questions before even thinking about accepting.

The file did come from someone i know tho lol so i assumed it was safe, therefore downloading it.
After downloading it i relised it was an unknown file (called itself a Ms Application) to me
so i deleted it. I work with zip files so am not in doubt of them lol but whats inside i am always
abit iffy. I mean i could put pics in a zip file an send ye it lol

Let that person know that they may be infected with summit. And didnt you ask as to what it was they were sending lol??

It says:

"Is it you??" blahdy blah so i assumed it was pics

Am not affected by this virus by the way lol jst so ya know. If i do sent ye the same msg lad (Matty)
let us know incase i did catch the lil shit.

Ohh sDbot who ever has that virus has there computer Compromised by a DDOS Drone which means there will be a hidden doctored mIRC clinet hidden within the persons computer given full access i hope the person doesnt do there Online banking on the computer cause then she will have to be very cautious and check every transaction made and bet there computer is running very slow indeed she/he needs to remove that soon otherwise they might get monitored via the ISP for miuse as it will most probly used for Denial of Service attaks (DDOS) so tell your friend to get it seen to soon as

lol will do haha

ISP's never do jack shit about DoS attacks originating from their users/network. They just advise (about a week after you make a report) you to null route all traffic to your affect IP's etc... Which you have already done anyway!!

Ye i'll let em know soundlad

Thanks for sharing Pomp
Not all visitors are computer literate and not aware of the potential risks

Keep them coming pomp if you have any more,
sharing makes us all wiser.