Sophos

Troj/IMspam-B

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from May 2007 (4.17)
Protection available since 13 March 2007 03:12:20 (GMT)
Detected by All Sophos products

Action

More Information

Troj/IMspam-B is a Trojan for the Windows platform.

Troj/IMspam-B is a mass spamming tool that targets MSN Messenger, Windows Live Messenger, AOL Instant Messenger and email addresses.

When run Troj/IMspam-B closes all other instances of itself and removes all EXEs in the root folder of the C drive.

Sample text appears as:

"Heeey i saw a pic of u online HAHAHA check <malicious link>"

At the time of writing, the EXE downloaded from the malicious link is detected as W32/Delbot-U.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer