InstantForum.NET v4.1.4Tweaks.com Forum http://forum.tweaks.com/forum/forum@tweaks.comThu, 20 Nov 2008 01:29:49 GMT20http://forum.tweaks.com/forum/Topic160526-59-1.aspx<A href="http://www.websensesecuritylabs.com/alerts/alert.php?AlertID=175">Websense® Security Labs™</A> has received several reports of a new IM Worm spreading on the AOL Instant Messenger network. Users receive a message requesting that they visit one of two websites. Both sites are hosted on the same domain in New Jersey and appear to have been taken down as of this morning. The URLs ended in "pictures.php" and "pictures.com".<P>Upon clicking on the URL, several pieces of malicious code are downloaded and installed on the local machine. These include:</P><P>* An unidentified Trojan Horse downloader which connects to seven separate websites to download other proxies, downloaders, and backdoors</P><P>* A Trojan Horse Backdoor (Backdoor.Win32.Agent.jn / Troj/Oscabot..a)</P><P>* A Spyware Toolbar ( Trojan-Downloader.Win32.IstBar)Tue, 03 May 2005 13:05:17 GMTquietman7