Re: buddylinks worm

falcon_at_secureconsulting.net
Date: 02/12/04

  • Next message: Eric Trager: "Re: buddylinks worm" 
    Date: Thu, 12 Feb 2004 12:16:11 -0600 (CST)
To: "Dennis Cheung" <dennis@pa.net>

    Ironically, removal is straightforward and reliable (thus far):

    To uninstall this application, use the ADD/REMOVE Programs Control Panel
    and remove the applications related to:
    * BuddyLinks
    * PSDT Messaging Integration
    * PSD Tools ChannelUp v1.0 (remove only)

    > Jason Yates wrote:
    >
    >> Another one of the AOL worms; this one instant messages all users on
    >> your buddy list. The message I've recieved is "check this out:
    >> http://ww.wgutv.com/osama_capture.php?bNek". The link is a fact news
    >> website telling you to download some software . Once you install the
    >> software on the page; it immediately instant messages everyone on your
    >> buddy list.
    >>
    >> The software it installs is something called buddylinks. According to
    >> buddylinks.net, Buddylinks is a "revolutionary new way for instant
    >> messenger users to instantaneously share entertaining content with
    >> their entire IM "buddy list" network all at one time". I can't make
    >> this stuff up.
    >>
    >> Jason Yates
    >>
    >> ---------------------------------------------------------------------------
    >>
    >> Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
    >>
    >> Protect your network with the comprehensive security solution that
    >> integrates six applications for ease of use and lower TCO.
    >>
    >> Firewall - Virus protection - Spam protection - URL blocking - VPN
    >> - Wireless security.
    >>
    >> Download 30-day evaluation at:
    >> http://www.astaro.com/php/contact/securityfocus.php
    >> ----------------------------------------------------------------------------
    >>
    >>
    > A friend has gotten infected with this "revolutionary" product. Has
    > anyone tried removing this thing manually before? The buddylinks site
    > has a unsubscribe feature that claims to work, but at the moment I am
    > reluctant until I figure out what exactly this thing is.
    >
    > -Dennis
    >
    > ---------------------------------------------------------------------------
    > Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
    >
    > Protect your network with the comprehensive security solution that
    > integrates six applications for ease of use and lower TCO.
    >
    > Firewall - Virus protection - Spam protection - URL blocking - VPN
    > - Wireless security.
    >
    > Download 30-day evaluation at:
    > http://www.astaro.com/php/contact/securityfocus.php
    > ----------------------------------------------------------------------------
    >
    >

    ---------------------------------------------------------------------------
    Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

    Protect your network with the comprehensive security solution that
    integrates six applications for ease of use and lower TCO.

    Firewall - Virus protection - Spam protection - URL blocking - VPN
    - Wireless security.

    Download 30-day evaluation at:
    http://www.astaro.com/php/contact/securityfocus.php
    ----------------------------------------------------------------------------

  • Next message: Eric Trager: "Re: buddylinks worm"

    Relevant Pages

    • Re: blocking p2p traffic
      ... In general it is observed that such applications do not work on ... > Astaro Security Linux, the comprehensive security solution that combines ... > Protect your network against hackers, viruses, spam and other risks with Astaro ...
      (Focus-IDS)
    • Re: blocking p2p traffic
      ... >> Security Linux, the comprehensive security solution that combines six ... >> applications in one software solution for ease of use and lower total cost ... >Protect your network against hackers, viruses, spam and other risks with Astaro ...
      (Focus-IDS)
    • RE: blocking p2p traffic
      ... Here's a good overview of the risks and mitigation regarding multiple ... - You are right that p2p applications changes port numbers in order ... >wireless security ... the comprehensive security solution that combines ...
      (Focus-IDS)
    • Re: blocking p2p traffic
      ... - Snort have rules to identify p2p connections and uses flexresp to ... so use nessus to detect such p2p applications ... >Security Linux, the comprehensive security solution that combines six ...
      (Focus-IDS)