IM worm on Yahoo!

By ArnY on Wednesday 10 January 2007, 16:16 - virus - Permalink

Trend Micro has a report of a new worm using Yahoo (which has unfortunately nothing common with my ICQ mystery). The worm sends links looking like pictures for some of them (but they are not):

    1. http://{blocked}.info/who.jpg
    2. http://{blocked}.info/friendpic1.jpg
    3. http://{blocked}.com/Gallery/albums/album/index.php
    4. http://{blocked}.com/Gallery/albums/album/index2.php
    5. http://{blocked}.com/Gallery/albums/album/YMworm.exe
    6. http://{blocked}.com/Gallery/albums/album/worm2007.exe

In fact the url are actually pointing to http://{blocked}.info/who.jpg/index.html (and the like) and the following file will attempt to download:

 # index2.php - HTML_SOHANAD.AL
 # YMworm.exe - WORM_SOHANAD.AL
 # worm2007.exe - WORM_SOHANAD.AG

From Trend Micro

Comments

1. On Monday 29 January 2007, 16:23 by Help

my computers infected with the worm2007. how do i get rid of it........PLZ HELP!!!!!!!!!!!!!!!!!

2. On Monday 29 January 2007, 16:23 by Help

my computers infected with the worm2007. how do i get rid of it........PLZ HELP!!!!!!!!!!!!!!!!!

3. On Wednesday 21 February 2007, 23:29 by Linda

my computers is also infected with the worm2007. how do i get rid of it........PLZ HELP!!!!!!!!!!!!!!!!!

4. On Wednesday 28 February 2007, 14:30 by kelly

pls e-mail me... I know how to destroy worm 2007

5. On Wednesday 28 February 2007, 14:30 by kelly

pls e-mail me... I know how to destroy worm 2007

6. On Monday 12 March 2007, 12:41 by whie

plz! help me to remove worm2007.

7. On Saturday 26 May 2007, 18:25 by nits

plz. help my pc is infected wid worm2007.exe plz. mail me if u got any solution to get rid of it.plz..................

8. On Thursday 7 June 2007, 17:40 by Jim

plz! help me to remove worm2007.

9. On Friday 22 June 2007, 07:51 by Denloeb

help me to remove worm2007.exe. thanks

10. On Friday 22 June 2007, 14:00 by Dareos

Plzzzz...heklp me get rid of that...
my mail is
khalilidareos@yahoo.gr

11. On Wednesday 27 June 2007, 14:26 by Tariq

I need to fix my PC from worm200, please help if u can. .................... Tariq.

12. On Wednesday 27 June 2007, 14:27 by Tariq

I need to fix my PC from worm2007.exe, plz. help me if anyone can...............Tariq

13. On Friday 3 August 2007, 06:57 by NiX

Hey guyz , may computer is infected by a Im virus wich also infects da computer called worm200t.exe....its is a self replicating one wich creates a new folder in every of your drives....it also turns off da task manager and u r Run application in da start menu....i changes u r Internet Settings and changes u r homepage to http:\\thecoolpics.net\.....and it diaables da button with wich v can restore da settings....plz help !!!!!!!!!!!

14. On Monday 6 August 2007, 19:09 by Bucky

Yeah.. my pc got that virus too... it mess my yahoo mesanger,Aol Aim, and Msn messager but it doesnt mess up myspace im.... if there is anyway except reinstallin windows xp using a xp cd and having to format the drive i need to know....ive remove AIM,Yahoo, and MSN messenger and it hasnt acted up since... ive help a lil but now i need help!!!!!!!!

15. On Sunday 12 August 2007, 11:19 by Arjun

My computer get infected with worm2007.exe
please help me to heal or remove it my mind is collapsing please help

16. On Sunday 12 August 2007, 11:20 by Arjun

My computer get infected with worm2007.exe
please help me to heal or remove it my mind is collapsing please help

17. On Sunday 12 August 2007, 14:36 by meteor

m y computer got infected with this worm2007.exe. at first my mp3 player got it, i tried to format it, i did format it from the command prompt but again it comes back i don't know what to do. plz help!!

18. On Friday 17 August 2007, 14:51 by manish

plz help me get rid of worm2007

19. On Tuesday 21 August 2007, 11:59 by medigeek

I have an antimalware package that wipes it off, or at least disables it:
www.erroneous.name

the download link is at the end, of course you agree to the terms & conditions.

20. On Monday 3 September 2007, 22:08 by nishu

Plz...Help me my pc is infected by worm 2007.it had created new folder in every drive and i cannot view my hidden files.i cannot open my folder options...Plz help....

21. On Saturday 22 September 2007, 09:01 by varun

hi,my computer is infected by worm 2007.tell me how to get rid of it?????

22. On Wednesday 9 January 2008, 16:17 by Roger

December 09, 2008.

I've got the same virus. It came in through "Pidgeon" (My spelling is off, but it's a program that allows one to combine multiple IM accounts). Basically I can no longer access the web from yahoo, nor download files like AVG anti-virus updates.

Any idea how to get rid of this pest??

23. On Wednesday 9 January 2008, 17:41 by ianovici ionel bogdan

Hi , and my pc had the worm2007.exe but i get rid of this using the next steps :
1.Get TuneUp Utilities 2006 and install it.
2.Open TuneUp Utilities 2006 and navigate to Administer Control->TuneUp Process Manager.
3.Search on the list a text that contains lsass Trojan and close it(right click and Terminate Process).
4.Open the disk with the windows installed , and search for lsass , delete the files found.
5.Open My Computer and search for New Folder.exe and delete the found files.
This worked for me!

24. On Wednesday 9 January 2008, 20:19 by ianovici ionel bogdan

To activate the task manager and regedit do this: open TuneUp Utilities 2006->Administer Control->TuneUp Registry Editor .
Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\ and delete this DisableRegistryTools = "1" and this DisableTaskMgr = "1" !
read more at http://www.proland.net/virus_info/w...

25. On Friday 29 February 2008, 10:35 by deepak

i have run " www.erroneous.name" an antimalware software and worked for me

i was having problems with worm2007.exe file

now i can see my run and also access my taskmanager

i think im now safe , it working yeppieeeeee

Thanks to medigeek.

26. On Monday 28 April 2008, 04:32 by tintin

pls help!...my computer has a virus named IM-Worm.Win32.Sonahad.exe and it creates new folders in my files,a URL pops up everytime i use yahoo messenger,how can i solve this? pls help....thanks!

27. On Tuesday 17 August 2010, 05:29 by discount mens jacket

It’s rather awesome,I have been searching materials relate to these stuffs for my paper.and

it really helps me.Thank you.

They posted on the same topic

Trackback URL : http://blog.devnull.fr/trackback/69574

This post's comments feed

Of Spam & Men

IM worm on Yahoo!

Comments

Add a comment

They posted on the same topic

ClustrMap