Our computer is showing signs of infection with aim. The away messages of
my kids are being changed to "OMFG
http://www.shadowedstories.org/bestfirends.scr!!!!!!"

They tried changing their passwords, no luck.

Seems to be ok on one computer, but not the other. Virus scan turns up
nothing. Happens to all log ons on that computer (when signed in on
multiple xp accounts).

I searched Symantec and AIM but find nothing on this.

Anyone know what this is?
Thanks.

On Tue, 1 Jun 2004 23:41:44 -0400, "LHabel" <(E-Mail Removed)> wrote
in <6%bvc.2707$(E-Mail Removed)>:

>Our computer is showing signs of infection with aim. The away messages of
>my kids are being changed to "OMFG
>http://www.shadowedstories.org/bestfirends.scr!!!!!!"
>
>They tried changing their passwords, no luck.
>
>Seems to be ok on one computer, but not the other. Virus scan turns up
>nothing. Happens to all log ons on that computer (when signed in on
>multiple xp accounts).
>
>I searched Symantec and AIM but find nothing on this.
>
>Anyone know what this is?

A worm.

First of all did you copy and paste that URL - there's nothing at the
location as written but I did find a file at
http://www.shadowedstories.org/bestfriends.scr This file is
identified by KAV as SdBot.gen.
"OMFG http://www.shadowedstories.org/bestfirends.scr!!!!!!" may be the
text of the link, but that says nothing about the target. Is
http://www.shadowedstories.org/bestfriends.scr the target of the link?