Messenger Virus

• Y_Shun

  6 Sep 07, 22:39

  code:

  http://tinypic.m5t.de/TanyaBabe.zip Who is this girl? She said she likes you 

  
  
  http://www.bigfooty.com/forum/showthread.php?p=8644416
• ndmmxiaomayi

  6 Sep 07, 22:48

  It's .COM file. Not www.google.com that DOT COM, but a Windows file extension that will execute. Something like your .EXE file.
  
  http://en.wikipedia.org/wiki/COM_file
  
  .COM files take precedence over .EXE files, that means it will if a file named notepad.com is found on your system, that file will always be executed first, rather than the .EXE file.
  
  Here is the virus scan results:
  
  AhnLab-V3 2007.9.5.0 2007.09.06 -
  AntiVir 7.6.0.5 2007.09.06 -
  Authentium 4.93.8 2007.09.06 -
  Avast 4.7.1029.0 2007.09.06 -
  AVG 7.5.0.485 2007.09.06 -
  BitDefender 7.2 2007.09.06 -
  CAT-QuickHeal 9.00 2007.09.06 -
  ClamAV 0.91.2 2007.09.06 -
  DrWeb 4.33 2007.09.06 -
  eSafe 7.0.15.0 2007.09.04 -
  eTrust-Vet 31.1.5114 2007.09.06 -
  Ewido 4.0 2007.09.06 -
  FileAdvisor 1 2007.09.06 -
  Fortinet 3.11.0.0 2007.09.06 -
  F-Prot 4.3.2.48 2007.09.06 -
  F-Secure 6.70.13030.0 2007.09.06 -
  Ikarus T3.1.1.12 2007.09.06 -
  Kaspersky 4.0.2.24 2007.09.06 -
  McAfee 5113 2007.09.05 -
  Microsoft 1.2803 2007.09.06 -
  NOD32v2 2509 2007.09.06 -
  Norman 5.80.02 2007.09.06 -
  Panda 9.0.0.4 2007.09.06 -
  Prevx1 V2 2007.09.06 Generic.Malware
  Rising 19.39.32.00 2007.09.06 -
  Sophos 4.21.0 2007.09.06 -
  Sunbelt 2.2.907.0 2007.09.06 -
  Symantec 10 2007.09.06 W32.Spybot.Worm
  TheHacker 6.1.9.179 2007.09.06 -
  VBA32 3.12.2.4 2007.09.06 -
  VirusBuster 4.3.26:9 2007.09.06 -
  Webwasher-Gateway 6.0.1 2007.09.06 -
  
  
  
  Note the way Windows read the extensions. It always read the last part, the rest are ignored.
• venny

  6 Sep 07, 22:55

  looking through the wiki, does that mean it doesnt affect 64bit os?
• ndmmxiaomayi

  6 Sep 07, 22:58

  I think so, because MS removed 16-bit support in 64-bit OS. Actually, if I'm not wrong, 64-bit systems don't support 16-bit programs.