AOL Instant Messenger virus
W32.Spybot.Worm has mutated to a new form that affects AOL Instant Messenger. Users have reported that the virus takes over the chat window and will periodically post a hyperlink in the current IM window. From what I’ve heard the virus is difficult to remove and all it is known to do is annoy AOL IM users. If you get the virus, follow Symantec’s removal instructions. Note that the removal of the current version may differ slightly than what Symantec currently reports because the new form just appeared a couple of months ago. Security Forums also has updated removal instructions for getting rid of the AIM variant. If you can’t get your system running after infection, then reformatting is the only way to go. The virus doesn’t infect your boot partition so a quick format should work. If you still have problems, then use a low-level format as a last resort.
The virus is already spreading at UCLA. I’ve seen a couple of people with infected profiles. The virus is activated when you click on the link and Internet Explorer is open. I don’t believe Mozilla can be infected by just clicking on the link.
If you see a link in somebody’s profile to buddypicture.net, don’t click on it. That is a virus site. You can only get the virus if you are using Internet Explorer. There are some great updated removal instructions located on Feedster. Check it out if you got the virus. The current variants insert “Whoaaa…Look what I found, click here” or “I can’t believe I found” into your profile.
38 comments
Most instructions for removing this virus tell you to hit CTRL+ALT+DEL, but every time I do, the computer freezes. Is there a way to get around this?
your new virus, or not so knew I guess is getting to be a pain! Its starting to stop my emails for no reason! the biggest problem is McGaff! anybody that sets up virus protection for large companys well tell you its junk. The things or attachments I,m trying to send I have sent before they are stored on the computer and have been for years now your system is telling me they have a virus and I scanned them with Norton[the best] and there is no virus. what do we do to stop this???
how do u get rid of the virus that is like i cant believe i found_______’s picture HAHAHAHA!
I believe that’s the same virus as the one mentioned in the article. If the removal instructions don’t work, please let me know.
Well, I’ve tried all of the insructions and I’ve used every program I’ve ever heard of and this thing still isn’t going away!!! :(
i may have got bits of the virus removed… i just removed the aim and upgraded to the new aim and then typed in mu usual screename and logged on and checked my profile.. im not sure it all worked but this virus SUCKS**** you can delete the programs that download itself to your computer easily with the add or delete programming you just have to find what was downloaded recently… i dont know how to explain what I have all done but I WANT THIS VIRUS TO DIE!.. this will get worse…
im back.. well i signed off my aim and it wont let me back on… it said there was an error.. what could this be.. hmm maybe the virus… no body knows
how do i get rid of the virus in my profile that says “Happy Holidays Everyone New Years 2003 Partaay”
how the hell do i get rid of the happy holidays everyone! new years 2003 partayy! virus:? its screwing up my computer and ****ing me off. can u pleas ehelp me?!
here are some removal instructions for the worm.. hope this helps all of you
The Happy Holidays Everyone!! New Years Eve Partayy! Virus……..I know how to get rid of it. Simply go to the website listed above- http://rsaisp.com/software.asp and follow the three simple instructions. It only takes seconds and I guarantee it’ll get rid of the virus. Any questions..im me on invu582..hope it helps!
http://www.rsaisp.com/software.asp
go there to get rid of the I FOUND ____ PICUTRE HAHAHAHA and new years eve and whatever. itll get rid of it instantly
does anyone know who to get rid of the virus that says Whoaaa….look at what I found, click here?
i dont know whats wrong with my aim but after im talking to like 2 people then the next person that tries to talk to me comes up as like a mobile device or something and i cant see what they’re saying but i can still type to them. i’ve looked everywhere to see if anyone has the same problem but haven’t found anything… please help me!!!
lol who would click on that link anyways its an obvious set up. I FOUND ____ PICUTRE HAHAHAHA! Happy Holidays Everyone!! New Years 2003 Partayy! its so funny bc a couple of my friends have it.
man…..a couple days ago my AIM stopped working and wouldnt let me back on. when i try to go to aol.com…it takes like 20 min to load..but every other website works fine. i dont know much about computers.. so someone please help me
ok i tried going to that rsaisp website thing but it wouldn’t work it said i was missing like some dll thing..whats that?
Since the end of December, whenever I try to move buddy windows, they are “hard” to move, and kind of “stick” or “jump” across the screen, and make the cpu click and labor like it’s loading a program. could this be a virus? McAfee couldn’t find it and Adaware hasn’t found anything either.
davw: It very well could be a virus. Try reinstalling AIM and see if that does the trick first. Next, update your virus scanner and run a full system scan. If nothing shows up, the only other solution is to reformat.
How do you get rid of the NEw Years Eve link in your profile?! >:o it keeps cumming back! ahhhhhh
The Happy Holidays profile bug, if you have it for a while, will produce a significant amount of pop-ups. These pop-ups are usually similar to eachother. That is how i knew i had this virus. WILL IT SCREW MY COMPUTER ALL UP?
We followed the instructions giving on this site and then got Norton 2004 and it cleaned it up and we are now virus free….
OMG! i have the most annoying virus or whatever it is! Everytime i sign on AOL instant messenger my away message all of a sudden opens and says…. WTF LOOK http://www.hodginsauctioneers.com/bestfriends.scr !?!???!?! then, if someone clicks the link-it automatically downloads the virus onto their computer!!!!!!!!!!!!!!!!!!!! the same away message pops up about every 5 minutes and it really gets annoying! if u already have your own away message up this one will automatically go over it! it also signs me off my AOL instant messenger every 20 minutes!!! about 12 of my friends have it and they are getting really annoyed by it too and it wont go away! i have gone into my files and deleted it and the file is gone but the virus is still working!!!!!!!!!!!! HELP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
the virus says ‘pics from the beach’ in my away message + has a link. it signs me on even when im signed off + puts up the away message. the away message will also come up while im signed on all on it’s own. how do i get rid of it ???
i got the pics from beach virus and i ran some anti-spyware, and anti-adware programs and then reset my security settings on internet explorer(cause it changes them) and i thought i got rid of it….then i was on AIM for about an hour, and a new away message popped up…”click here to see my pics from valentines.” This is a wierd virus, it won’t get off my computer. I ran all the programs to get rid of it again, and its gone now, at least i think it is.
I have the look at my beach pics virus and now it won’t let me go on internet explorer!! This virus is so annoying!!!
HOW DO U GET RID OF THE PICS AT THE BEACH VIRUS!!!! SOMEBODY PLEASE HELP ME!!!!
I also have the pics on the beach one, very annoying!!!
I’d appreciate help ASAP
i also have the pics on the beach one, very annoying!!!
how do i get rid of this AIM virus called……new pics from beach!!!! soo annoying….anyone wit good info help me or email me at imanmivehi@yahoo.com
Ok, so i think this is a NEW aim virus. The text reads “I look so funny in these pictures” or something close to that, and then there is a url underneath it. if you are stupid, like me, you will click it and save the file. opening it will start the virus and send the same message to all of the people online in you buddylist. its a pretty harsh virus that will freeze your computer and not let you do anything really, but safe mode still works. if there is anyone who comes across this and knows a good solution to getting rid of this virus PLEASE leave a post. im trying my hardest to get rid of it myself, but im not having the best of luck right now. i dont think Norton antivirus will detect it. if you come across this virus from someone’s im just close the box. Watch out for this one.
This virus has pretty much messed up my entire computer. I have a brand new computer, with virus protection, before even doing anything on it i got this and now my entire computer will crash when i try to boot up. Help?
yeah, i got that NEW BEACH PICS!!! virus. i have no clue how to get rid of it, if someone could give me step by step instructions, i would appreciate that so much. ugh i really hate this :(
help.
I also just got the “NEW PICTURES FROM THE BEACH http://home.comcast.net/~recooney/pictures.pif !!” virus…HELP!!! Please send detailed instructions to get rid of this thing….I am not computer savy at all, so I need all the help I can get. I have signed off on AOL IM and made sure that I turned off the automatic sign in, otherwise it would keep signing me in…it keeps popping up saying “The AIM hyperlink you’ve clicked on may require you to be online to work. Please log in first.”
i accidentally clicked on a link and i think it gave me a virus…whenever i am signed on it will put up and away message that says “OMG LOOK http://www.4photo.net/picts.php?newyears !!!” about every 5-10 minutes or so…i dont even tell it to make me away..also if i am signed off and my computer is on it will sign me on and instantly put up the same message…somebody please please please help me!!!
I have recently recieved the aol instant messenger virus for the second time and had to reload my windows due to the virus corrupting my internet explorer. The person who created the virus is changing the virus intead of saying i can t believe i found this picture or i found this picture it has more variations like check out my new pics, and hey i got new pics, from what i can tell the virus inserts itself into ur computer when u click on the link and it seems to add files that are traditionally not uninstalled when you normally uninstall it on the uninstall portion of ur add or remove software wizard under control panel the only way that i know to fix this problem for certain deals with reloading which leads me to believe this virus might alter the registry or create hidden files normally not found by traditional methods, i do know that there is a way to find out what the culprit is by simply clickin on ctrl alt del and pullin up ur task manager and look at the processes and see which of the non basic functions is pulling cpu usage from ur computer i cannot remember the name but it sounded something like this when i saw gruaa.exe or something similar to it, just tryin to inform as many people as possible about the new changes to it, and always remember to ask about links before u click on them. If a clicked on link seems to not do anything then most likely u are already infected like i recently found, the new version of it seems to be a bit more malicious than the previous the previous was just annoying the new one is just sick and seems to be someones attempt to screw alot of people over. So best piece of advise to all of you is be very careful on any messenger and try avoiding pictures on websites unless you know for a fact it is a known good website.
i have a problem i try 2 get a icon for AIM and ever time i click on it it says u have instert a hyperlink that ur clinek does not support how do i delete that?
I have a virus on my aol instant messenger screen name. I need help. Everytime i log on a message pops up and sends it to all of my buddylist friends. It says somthing to the effect of. Hey can i use this picture of us on my myspace? and people asumeing its a picture of us open it and it gives them i viurs. I got this virus from a friend of mine and i thought we had gotten rid of it when we got our computer fixed. NO I tried getting a new screen name but it still keeps sending this message! i’m afraid i’m going to mess up someone eleses computer! How can i get this virus to LEAVE???