NEWS FROM THE LAB - Monday, September 18, 2006

AutoIt.D and Agent.AXN Spreading via Yahoo! Messenger Posted by Francis @ 06:59 GMT

We have received some reports regarding AutoIt.D and Agent.AXN spreading via Yahoo! Messenger. AutoIt.D and Agent.AXN pops up a message randomly selected from any of the following messages in the screenshot below:

AutoIt.D Messages

Once the link has been clicked - it will redirect you until it downloads a copy of itself. And if it's accidentally executed, it will disable your Task Manager and Registry Editor. Moreover, it will set your Internet Home Page, Yahoo Buzz link, and Launchcast link to http://www.geocities.co.jp/tha[REMOVED].

Be cautious in clicking these links, especially with the above mentioned strings.