Support Virus.Org

Help support Virus.Org by donating.
Donating allows us to keep this site free and pay the running costs of all our services.
Another MySpace Nasty on the Loose PDF Print E-mail
Written by Editor   
Tuesday, 27 February 2007 16:23

Well those poor MySpace users don’t half get some stick. There seems to be a bit of a MySpace nasty on the loose that is modifying profiles to drop in a link to a Zlob Trojan Downloader variant. 

It seems that the Zlob variant when executed seems to download various bits of code to compromise your system, one of which attempts to modify any MySpace profile you may have to include the html for the attractive warning designed to dupe viewers into downloading the Trojan.

So we recommend that you avoid clicking on anything on a MySpace site that looks similar to this below.

The injected html looks something like

<a href="http://8X.XX.XXX.XXX/lXXX.php"><img style="position:absolute;top:0;left:0;width:980px;height:800px;"
src="http://creative.myspace.com/cms/Splash/User_Video_1/coolvid_bg.gif"></a>
<div style="position:absolute;top:200;left:0;width:980px;text-align:center;font-size:36pt;..;">This profile contains adult content.
<br /><a style="font-size:36pt;" href="http://http://8X.XX.XXX.XXX/lXXX.php">CLICK HERE</a> to install MS Viewer.</div>

It should be possible just to remove the offending html from your MySpace site to recover if you’ve been affected. However at this time the Zlob downloader is only picked up by a couple of anti-virus products so be careful. It should be picked up by the main players pretty quickly. 


Add this page to your favorite Social Bookmarking websites
Digg! Reddit! Del.icio.us! Google! Live! Facebook! Technorati! StumbleUpon! Yahoo!
Last Updated ( Saturday, 13 September 2008 12:31 )