[Users] Worm with rootkit hits AOL chat service

[Jared Rimer]

Thought you guys might be interested in this if you use AIM.  From 
ComputerWorld.
          Worm with rootkit hits AOL chat service
A URL for the worm is passed through instant messages on a person's Buddy List
                News Story  by Jeremy Kirk

   NOVEMBER  01, 2005
(IDG NEWS SERVICE)
    -
              Links leading to a worm that eventually implants a 
nasty rootkit on
a user's computer are popping up on America Online Inc.'s Instant 
Messenger network,
security researchers said.
The URL is passed through instant messages on a person's Buddy List 
and in AOL chat
rooms, Websense Inc. reported. Some versions of the URL have been 
taken down, and
all were hosted on personal Web pages, the company said. Users see an 
instant message
that says "see thing!!" or "hilarious," followed by a URL.
Clicking on the link starts a known worm, W32/Sdbot-ADD, which then 
transmits the
lockx.exe rootkit, according to an
advisory
  posted Friday by FaceTime Communications Inc., which is based in 
Foster City, Calif.
The code allows an attacker to monitor the computer and upload or 
download files.
It also attempts to shut down antivirus programs in addition to 
installing a back
door that could be used to install more software. The lockx.exe 
rootkit connects
to an Internet relay chat server and waits for remote commands.
Additional annoyances include changing the home page on the user's 
Internet browser
and downloading applications from vendors such as 180solutions, 
Zango, the Freepod
Toolbar, MaxSearch, Media Gateway and SearchMiracle, FaceTime said.
Reprinted with permission from
www.idg.net/
  For more news from IDG visit
IDG.net
Story copyright 2005 International Data Group. All rights reserved.

Jared Rimer
Business website: http://www.superior-software.com/support
Personal Website: http://www.asmodean.net/jrimer
Music Education Network for the Visually Impaired  http://menvi.org a 
service done through Superior Software level one
WBBY Internet Radio and All In Play team up.  Learn more 
http://www.menvi.org/allinplay
WBBY Internet Radio: www.wbby.us