file.qip.ru and egg virus
Literally today, through ICQ and the file.qip.ru exchanger, an interesting enough virus has spread, interesting at least with what it can say :)
It all started when I received a message from my friend.
Previously, the sad experience made me ask every time I get such links, but when I received the answer I realized that there was nothing to fear ... I opened it, paid attention to what is written Tested by Kaspersky Anti-Virus 2009-10-18 and without fear downloaded and launched, I saw scrambled eggs, closed. But here I was once again saved by Linux.
A few minutes later, I learned that as it turned out, it was a virus, and it seems to be quite well planned. As of 01.23 Moscow time, the file has been downloaded 13,897 times. Such a rather large army of bots is obtained.
I was surprised by the organization of the virus itself, the developer of the virus had thought out in advance that the majority would ask a question like “What is it” and prepared an auto answer. After a virus is infected, the virus steals your ICQ account no matter what IM client you use, then the virus is sent to the entire contact list.
Perhaps habrakhabr is not the place where it is necessary to warn about the virus danger but still, maybe someone did not know ...
UPD: The virus was removed from file.qip.ru as of 01.35 Moscow time, it was indicated in the reason
This file is no longer available. By that time, the virus had been downloaded more than 14,000 times.
UPD2: Transferred to the thematic blog.
It all started when I received a message from my friend.
(23:26:41) ***:
Link to download the file Egg.rar
file.qip.ru/file/104633322 *** (950 kb)
[- File sent via file.qip.ru. Read more at: file.qip.ru -]
(23:28:08) Screatch:
what's this
')
(23:28:17) ***:
something positive)
Previously, the sad experience made me ask every time I get such links, but when I received the answer I realized that there was nothing to fear ... I opened it, paid attention to what is written Tested by Kaspersky Anti-Virus 2009-10-18 and without fear downloaded and launched, I saw scrambled eggs, closed. But here I was once again saved by Linux.
A few minutes later, I learned that as it turned out, it was a virus, and it seems to be quite well planned. As of 01.23 Moscow time, the file has been downloaded 13,897 times. Such a rather large army of bots is obtained.
I was surprised by the organization of the virus itself, the developer of the virus had thought out in advance that the majority would ask a question like “What is it” and prepared an auto answer. After a virus is infected, the virus steals your ICQ account no matter what IM client you use, then the virus is sent to the entire contact list.
Perhaps habrakhabr is not the place where it is necessary to warn about the virus danger but still, maybe someone did not know ...
UPD: The virus was removed from file.qip.ru as of 01.35 Moscow time, it was indicated in the reason
This file is no longer available. By that time, the virus had been downloaded more than 14,000 times.
UPD2: Transferred to the thematic blog.
Source: https://habr.com/ru/post/70287/
All Articles