New AIM Worm Dupes iTunes Fans

By Ed Oswald | Published July 21, 2005, 1:29 PM

A new worm has been discovered on the AOL Instant Messenger service that dupes users into thinking it is a file for the popular iTunes music player software. The worm appears in an IM with the message "this picture never gets old" and a link to what appears to be an image URL. However, it is not an image and is rather an executable file called "iTunes.exe" which will install several spyware applications including "Internet Optimizer," "Media Ticket," and "180 Search Assistant."

Trend Micro, which discovered the worm and issued a warning about it, said that the file also opens a "backdoor" allowing hackers to send commands to the computer from an Internet Relay Chat (IRC) chat room. The hackers could download or execute files on the machine as well as send AIM messages to other users on the infected user's buddy list. The worm affects all versions of Microsoft Windows.

Comments

If it requires one to execute it, how does one become infected? I'm at a lost...What would you open ITUNE.exe anyway...just go download the actual one from Mac website if you need one...

Score: 0

|

Hey, it's a link from an untrusted sender! Let's click it! What? It was an image but now it's actually an executable file? Let's run it. (I mean, it says iTunes, so it HAS to be OK.)

Score: 0

|

im so with you man.... but hey not everyone can be smart...

Score: 0

|

These are some of the worst adware/spyware programs around. And they're a pain in the a** to remove particularly that Internet Optimizer.

They should have been busted a long time ago...

Score: 0

|

Even if the filename woud be Worm.exe people will still open it! This worm I think is made by an advertising company :)

Score: 0

|

If you use even 1% of your brain this shouldn't be a problem.

Score: 0

|

Yeah but the problem is most computer users don't.

Thats also pretty large for a percentage since the average person only uses 10% actively.

Score: 0

|

real mp3 listeners will not be affected though ;-)

Score: 0

|

Don't wait for Microsoft's patch: Secure Windows now from today's 0-day

Microsoft is recommending users simply get rid of a vulnerable ActiveX control that no one even uses any more. We'll show you how to do that right now.

Nokia: Android? Are you crazy?

Rumors about new Android devices abound, but Nokia squashes this one.

Symantec goes live with Norton 2010 betas

Norton Internet Security and Norton Antivirus 2010 are now available for testing.

What's Now: Drenched with 'Purple Ra1n,' iPhone users caught eating 'redsn0w'

Plus: Symantec and McAfee go to war, and what's LucasArts building in its top-secret, moon-shaped orbital facility?

In New York, online booze loses a Circuit Court decision

Court worried about gangster influence if liquor purchased directly.

British Telecom sacks bitterly unpopular Phorm ad platform

Phorm under BT is no more, but the targeted ad service could still go on under Virgin or TalkTalk.

CBS is the last man standing against Hulu

Popular streaming syndication site Hulu now has all the major networks in its camp except CBS.

Not just Vista: The operating system is dying, too

Carmi Levy: Wide Angle Zoom Vista's troubles point to a bigger shift that will affect more than just Microsoft.

Bolt: the dark horse mobile browser

Bitstream's small-footprint mobile browser is available in Beta 3

IE8 WSUS update push to begin August 25

After months of availability to users willing to seek it out, Internet Explorer 8 will be rolled into Windows Server...

Geeks vs. journalists: A tale of two worldviews

Recovery with Angela Gunn Why geeks think most mainstream journalism is flaky, and why the mainstream thinks geeks are trying to kill them. (They're both right.)

Can Linux do BitLocker better than Windows 7?

Betanews kicks off a new series with a look at how the Linux operating system's FDE stacks up against BitLocker, the Windows feature that today commands a $120 premium.

Windows 7 ISO Verifier 1.0

July 6 - 5:40 PM ET

ProgDVB 6.10.2

July 6 - 5:19 PM ET

FreeBSD 8.0 Beta 1

July 6 - 4:58 PM ET

K-Lite Codec Pack 64-bit 2.5.0

July 6 - 3:55 PM ET

SysCheckUp 1.4.0

July 6 - 3:34 PM ET