Support NeoGAF

[Black Deatha]

Has anyone sles seen this sent to you over MSN?

WARNING DO NOT CLICK THE LINK BELOW!!!!

omg this is funny! http:/DONT CLICK THIS/]jose.rivera4.home.att.net/cute.pif

I just got home from work and has this message sent to me by 2 seperate people, not thinking I clicked the link, when I did it flashed all my MSN windows, and than it gave me an error, shortly after I get a message form this girl who I didnt cureently have a IM window open with and she asked me what the link was I just sent her, as it turns out, she had the same link that I clicked sent to her, it seems clicking this will send the same message to all your currently online contacts.

Anyone sles seen this? Know more about it? Could it just be harmless, or some form of virus/spyware?

Whatever you do, if you havent seen it yet, and do, dont click it!

EDIT: Just so no one clicks this I have messed with the link!

~Black Deatha

 

[The Faceless Master]

you should have futzed the url so its not clickable...

 

[Dyne]

It was sent to be by my friend Rachael, but my other friend had "don't click this link" in his MSN name.

It's a virus. It'll spread itself if people keep following through.

 

[Black Deatha]

It was sent to be by my friend Rachael, but my other friend had "don't click this link" in his MSN name.

It's a virus. It'll spread itself if people keep following through.

What are you basing that on, did you get it too, and if so, what kind of virus, is it gonna cause shit, will AVG delete it?

~Black Deatha

 

[Dyne]

What are you basing that on, did you get it too, and if so, what kind of virus, is it gonna cause shit, will AVG delete it?

~Black Deatha

No, my friend said, if you click the link and download it, it'll just install a virus on your computer. And then whenever you have messenger open, it'll send the same message to other people.

 

[Mugen]

I know someone that clicked on that link and his comp is now dead. I think that's the virus that you couldn't detect and is encoded in the kernel itself. But then again, I'm not sure about the being encoded in kernel stuff, but I heard about it in the news. Just not sure if it's the same thing.

 

[Black Deatha]

Even to new people that sign on later?

~Black Deatha

 

[Dyne]

Even to new people that sign on later?

~Black Deatha

Yeah, as long as it's installed; that's the impression that I'm under.

 

[Great King Bowser]

Thank you Firefox.

I got sent that message, clicked the link, Firefox instead of opening like I assume IE did to spread the virus asked me if I wanted to save.

Noticing it was a .pif which I don't recognise, decided not to save. Danger averted.

 

[miyuru]

Thank you Firefox.

I got sent that message, clicked the link, Firefox instead of opening like I assume IE did to spread the virus asked me if I wanted to save.

Noticing it was a .pif which I don't recognise, decided not to save. Danger averted.

:lol you're totally wrongfully praising Firefox here. I love Firefox too, but I hate dickriders.

 

[Great King Bowser]

:lol you're totally wrongfully praising Firefox here. I love Firefox too, but I hate dickriders.

What?

 

[Draff]

I got it this afternoon too but it asked if I wanted to save it.
It sounded too much like JOKEWORLD so I clicked no.

 

[LusDekkar]

Sister clicked on the link :\
sent a msg to all her contacts so yeah, and idea how to get rid of it?
She clicked on a file name that was omg[1].pif, after it sent a msg to all her contacts omg.pif asked for internet access which i then blocked with the firewall.

 

[Black Deatha]

I feel really stupid now, Chalk it up to being kinda tired and unalert all day I suspose, damnit, if anyone know's how to get ard of it....

I ran a search with AVG, but it seems it's to new for, AVG hasnt been updated foi it yet.

~Black Deatha

 

[aoi tsuki]

It's been ages since i've legitmately used a PIF (program information file), but IIRC they were basically files that saved settings in DOS programs used in Windows. i didn't even know they were still in use. i wasn't even able to save the PIF and open it in Notepad, so i can't tell you what it does. But considering they're essentially executables, don't open them if you don't recognize them, and definitely don't open them if they're sent to you from someone else.

 

[aoi tsuki]

Here's one report:

A new worm has set its sights on MSN Messenger users, and is currently spreading its way through the network, anti-virus software makers warned on Thursday. The worm, named W32/Bropia-A, attempts to trick users into downloading malicious PIF files. Once a file is executed, it runs a trojan horse that allows the hacker to control a victim's machine through Internet Relay Chat. The trojan could potentially be used to reveal system information, log keystrokes, relay spam, or steal sensitive data according to security experts. The Bropia-A worm follows a similar attack on MSN Messenger users last October. That worm, called Funner, altered the Windows host file and added pornography and gaming sites.

http://www.lostcoders.net/index-single-892.htm

Here's the google for more results:
http://www.google.com/search?hl=en&lr=&q=malicious+pif&btnG=Search

i'm on my way out. Good luck.

 

[ElyrionX]

Thank you Firefox.

I got sent that message, clicked the link, Firefox instead of opening like I assume IE did to spread the virus asked me if I wanted to save.

Noticing it was a .pif which I don't recognise, decided not to save. Danger averted.

How does that happen? Isn't IE the default for MSN and I can't find anywhere in Preferences to change the default browser for MSN.

Also, I got sent that link by a couple of different people on my list. I can't believe how many people fall for something as suspicious as that...

 

[aoi tsuki]

How does that happen? Isn't IE the default for MSN and I can't find anywhere in Preferences to change the default browser for MSN.

Also, I got sent that link by a couple of different people on my list. I can't believe how many people fall for something as suspicious as that...

You may be able to set the program defaults: Control Panel > Add/Remove Programs.

And i could easily see how a lot of people would mistake "PIF" for "GIF", or think the two are somehow related, or just not care and try to open it anyways.