Another MSN Trojan going around...

[fl00d3d]

The MSN message says something like this:

<:o) [url=http://you-idiot-dont-actually-click-it-!!!!]http://infectedperson.Pictures-iClub.com/[/url]
awesome site!! im there now..not here (H)

The root site you need to watch out for is:
[url=http://you-idiot-dont-actually-click-it-!!!!]Pictures-iClub.com[/url]

It's a chinese site:

Spoiler: show

(Asked whois.paycenter.com.cn:43 about pictures-iclub.com)

Domain Name : pictures-iclub.com
PunnyCode : pictures-iclub.com
Registrant:
Organization : Pan Wei wei
Name : Pan Wei wei
Address : BaoChun Rd. 27 No. 3 1F Apt. 1903
City : Bejing
Province/State : Beijing
Country : CN
Postal Code : 100176
Administrative Contact:
Name : Pan Wei wei
Organization : Pan Wei wei
Address : BaoChun Rd. 27 No. 3 1F Apt. 1903
City : Bejing
Province/State : Beijing
Country : CN
Postal Code : 100176
Phone Number : 010-010-58022118-58022118
Fax : 86-010-58022118-58022118
Email : 127@126.com

Technical Contact:
Name : Pan Wei wei
Organization : Pan Wei wei
Address : BaoChun Rd. 27 No. 3 1F Apt. 1903
City : Bejing
Province/State : Beijing
Country : CN
Postal Code : 100176
Phone Number : 010-010-58022118-58022118
Fax : 86-010-58022118-58022118
Email : 127@126.com

Billing Contact:
Name : Pan Wei wei
Organization : Pan Wei wei
Address : BaoChun Rd. 27 No. 3 1F Apt. 1903
City : Bejing
Province/State : Beijing
Country : CN
Postal Code : 100176
Phone Number : 010-010-58022118-58022118
Fax : 86-010-58022118-58022118
Email : 127@126.com

If you get infected by something like this, crank up your security (especially antivirus) and reinstall MSN. Then search the web (if you can) for a specific solution to whatever version you got infected by. And in the future, don't be an idiot and click on everything that is sent to you!

[BassAce]

Thanks for the heads up. and lol love the hover text for the link.

[Spurs]

so in other words sean clicked it.

[Cursed]

cmon Sean, didnt they teach you anything in the NSA

[BassAce]

http://garwarner.blogspot.com/2009/05/p ... steal.html According to this they have a history of Phishing

[farnagain]

Pan Wei Wei, huh?

[medici]

It's Chinese for "Lol, you fell for it you stupid b*tch, now all of your friends are going to know, unless they're as stupid as you."

Conversations are so much shorter in Chinese...

[danpaul88]

Incidentally I installed the next version of Trillian today, the beta for Astra. Looks awesome compared to the current version, and seems to better support MSN, such as supporting offline messages. Hopefully file transfers will have more than a 1 in 10 chance of working properly now too

[fl00d3d]

so in other words sean clicked it.

No, I didn't click it. I moused over so I could see the URL then punched it into Samspade (whois query).