Backdoor.Win32.IRCBot.aou (IMG34814.pif)

[Malekal_morte]

Nouvelle infection MSN.

Les messages de propagation :

WoW? is that really you... what the hell where you drinking
LOL, you look so ugly in this picture, no joke...
Should I put this on facebook/myspace?
Hey m8, who is this on the right, in this picture...
Sup, seen the pictures from the other night?

L'infection ajoute la ligne suivante sur HijackThis :

O4 - HKLM\..\Run: [ATI] msnmsur.exe

L'infection ajoute les fichiers suivants :

C:\Windows\system32\msnmsur.exe
C:\Windows\images.zip