FRIHOSTFORUMSSEARCHFAQTOSBLOGSCOMPETITIONS
You are invited to Log in or Register a free Frihost Account!


ATTENTION: The Orkut Worm!!





Xavier
Yes, I am talking about the orkut worm. I personally saw it in action in my friend’s scrap book and I thought I’ll write about it.

So, if you are using Orkut using KP or from home, you must read this article…

Never bother to click on any links that sounds really unfamiliar to you even if it comes from your closest friend.

Here is how the scrap will look like.
“Opa, tudo bom? Eu criei um vídeo com uma seleção de minhas fotos novas, clica aí pra ver - h t t p :// y e p . i t / ? i k s t t v - Estão bem legais!!! “

What should you do?
Simply delete the scrap! As simple as that..

How does it spread?

It spreads through infected contacts. An orkut account gets infected once you click on the link. The Trojan posts a message in your all your friend's scrapbook area of the Orkut system. The message text is chosen by the attacker and can be a random sentence written in Brazilian Portuguese, such as the following:

Message example 1:
Opa, tudo bom? Eu criei um video com uma selecao de minhas fotos novas, clica ai pra ver - [MALICIOUS_LINK] - Esta bem legais!!!

Message example 2:
Oi... tudo bom? Como o orkut limita a quantidade de fotos que podem ser publicadas na minha conta, eu criei um slide com algumas fotos minhas, pra ver e so clicar clicar no link!!! [MALICIOUS_LINK] - Sei que vai gostar

If users click on the link, a malicious file is downloaded, which is a copy of Infostealer.Orcu.

When Inforstealer.Orcu is executed, it performs a series of actions and infects your system.

What does this scrap in Portuguese mean anyway? I tried using a translator and this is what I got…
Opa, all good one? I created a video with an election of my photos new, clica pra to see there - h t t p :// y e p . i t / ? i k s t t v - I am well legal!

Name of the Trojan: Infostealer.Orcu

Norton’s Description: Infostealer.Orcu is a Trojan horse that attempts to steal confidential information, such as bank and Paypal accounts. It may arrive as a message spammed across the Orkut network.

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

This article can also be found on the following links..

My Infy Blog: http://blogs.ad.infosys.com/users/arun_c01/3923.html
Freizeit: http://freizeit.us/modules.php?name=News&file=article&sid=177
DecayClan
Well, generally Don't open stuff that look suspicious....
Curiosity DID KILL THE CAT Razz
Although i believe that with a good security suite, you will be warned, and the malicious software, will be destroyed immidiately...(that what most of the times happen to me with Kasperky Internet Security Suite). Even with files, that i have just downloaded(without trying to open them), i get a warning, and it deletes it...
coolclay
What the heck is orkit and scrapbook, I have never heard of them?
photon
Quote:
What the heck is orkit and scrapbook, I have never heard of them?


its orkut. its a social website where you can make friends...

and thanks for letting me know about this worm. anyway, i dont open any links in my scrap book
The Czar
DecayClan wrote:
Well, generally Don't open stuff that look suspicious....
Curiosity DID KILL THE CAT Razz
Although i believe that with a good security suite, you will be warned, and the malicious software, will be destroyed immidiately...(that what most of the times happen to me with Kasperky Internet Security Suite). Even with files, that i have just downloaded(without trying to open them), i get a warning, and it deletes it...


Chuck Norris Killed The Cat.
Thanks for the info on the worm.
Related topics
Reply to topic    Frihost Forum Index -> General -> General Chat

FRIHOST HOME | FAQ | TOS | ABOUT US | CONTACT US | SITE MAP
© 2005-2011 Frihost, forums powered by phpBB.