[zarah]

Hi,

Could it be possible that my friend's pc has been infected by a worm/virus from BBO software? When she is playing online, messages/links to sites which are dangerous are automatically displayed in the chatbox. She then has to warn everyone not to click on it etc. Her virus checker is not picking it up.

Does anyone else have this problem?

THank you very much

[uday]

I edited the title of your post.


1. Yes, your friend is probably infected

2. No, it was not from BBO

3. She needs to try another virus checker

4. What is her username ? you can send me a private message if you don't want to type it here.


We see this particular type of virus periodically. Last week it was a spanish version of this, called "W32/MSNDiablo.A.worm"

Our usual response is to block the infected PC until the user emails us and tells us that he is clean.

Uday

[hrothgar]

uday, on May 9 2008, 02:48 PM, said:

I edited the title of your post.


1. Yes, your friend is probably infected

2. No, it was not from BBO

3. She needs to try another virus checker

4. What is her username ? you can send me a private message if you don't want to type it here.


We see this particular type of virus periodically. Last week it was a spanish version of this, called "W32/MSNDiablo.A.worm"

Our usual response is to block the infected PC until the user emails us and tells us that he is clean.

Uday

Hi Uday

Could you expand on this? Is there actually a virus out there that is specifically designed to target the BBO application and use the chat system to display links in the chatbox?

Alternatively, is this simply a case where the viru is exploiting the integrated web browser?

This might sound perverse, but if its the former, congratulations... If the virus manufacturers are writing viruses targetting the BBO client this is a sign that you've made it to the big times.

[uday]

Hola

What we've seen is only this. People get infected with something that seems to blindly spray plain text messages to any application.

Since in bbo, typing 'hello" and pressing enter when logged in sends a message, bbo reacts by sending table/lobby chat when the virus does its thing.

It isn't that we're being targeted.

Usually, the victim doesn't know why this is happening. Usually, when we block them they're able to remove the virus and come back online w/o any difficulties.

The viruses seem to spray URLs that presumably propagate the virus via a download.

[uday]

btw, the spanish one that is floating around sends a link claiming to have a joke about Bush ( the USA president). When a user clicks, he seemingly gets infected immediately.

[zarah]

Hi Uday,

Thanks for allyour help. My friend had the Diablo virus, but she has had her machine cleaned (and reformatted) and everything is now okay with her, so no need to block her.

Cheers

Zarah