Someone trying to pass a virus to FFR users?

[alainbryden]

I've recently recieved an anonymous message from an Aim user named "Team FFR Killer" Containing a link to a zip file named "Comhost.zip"

I downloaded it and opened it in winRAR with script blocking and noticed that it attempts to replace the existing system Comhost.exe file on extraction using winzip. This file is related to messenger services, and then runs other included scripts such as MSNupdater.exe which clearly had no intention of making my life any more wonderful.

As my username is alainbryden, I would assume that I am the first of many to recieve such a message if the intention is to attack ffr members in alphabetical order via their aim adresses.

I didn't think much of it at first, so I didn't record anything but the file downloads directly from some IP address so anyone with interest shouldn't have too much trouble finding where it came from. Just thought you ought to know.

Wouldn't have even said anything if the name wasn't "Team FFR Killer"

[lightdarkness]

Re: Someone trying to pass a virus to FFR users?

It should be common knowledge not to accept attachments from users you do not know.

[Moogy]

Re: Someone trying to pass a virus to FFR users?

Yeah he AIMed me too.

This is the exact message: [21:25] TeamKillerFFR: n http://209.188.31.15/7cdc11c1a348ab0...er/comhost.zip c:\comhost.exe r h

Don't know what he was trying to accomplish, but okay.

[terence1357]

Re: Someone trying to pass a virus to FFR users?

I wish my user name was AAAAAAAA

[lightdarkness]

Re: Someone trying to pass a virus to FFR users?

OHHHHHHH

I UNDERSTAND IT NOW

Ok, Team Killer, the team on FFR, that's one of their screennames. It's just a normal FFR user who was infected with an AIM virus.

So it's not like someone on FFR is trying to do this, one of them just happens to be infected, and you're on their buddy list

[natetheffrer]

Re: Someone trying to pass a virus to FFR users?

He sent it to me too, but he said that twilight_overlord sent it to him or something along the lines of twilight saying he hacked his computer.

[sleeplessdragn]

Re: Someone trying to pass a virus to FFR users?

I'll be looking out for this, thanks for the heads up. Alain, make my stepfile. Is that better pressure =p (inside joke)?

[SqNtz_xoombotvx]

Re: Someone trying to pass a virus to FFR users?

can't touch this

[Snapps]

Re: Someone trying to pass a virus to FFR users?

I feel sorry for you guys on that random guy's AIM list haha.

[alainbryden]

Re: Someone trying to pass a virus to FFR users?

Oh well explained LD. It was a trowoff the way he happened to have FFR and Killer in his screen name. Anyhow, yes I didn't just accept an attatchment. I downloaded the file and took a look at it with scripting disabled just out of curiosity of what the virus was trying to accomplish.

It makes sense in light of the fact that the system files the script was infecting were messenger related.

[Grandiagod]

Re: Someone trying to pass a virus to FFR users?

That sucks. Oh, FFR will give you the AIDS too.

[scorpio1690]

Re: Someone trying to pass a virus to FFR users?

I wish my user name was AAAAAAAA

11111111 or any number name would be before that.

I wish I was scorpio1690.


OSHI

[JurseyRider734]

Re: Someone trying to pass a virus to FFR users?

Good thing i'm buddies only 8)

[Mindfields]

Re: Someone trying to pass a virus to FFR users?

I don't see why ANY one would send a virus to Alain, though.
Must be a hooker he forgot to pay or something.
A techno savvy hooker.

[terence1357]

Re: Someone trying to pass a virus to FFR users?

TeamKillerFFR: I'm the leader of an FFR team, name TK. Which stands for Team Killer
Uber Zeo5: TK_Killer?
TeamKillerFFR: Yes.

B&