Gabby.a, a worm very much like the Kelvir family that's been knocking at Microsoft's instant messaging network (and actually knocked the Microsoft-based Reuters messaging service offline for a day two weeks ago), had been spreading through AOL's IM users.
Users received a message with text that read "Hey check out this!" with a link that downloaded and installed the payload, a variant of the infamous Spybot worm which can open a backdoor to the infect machine, use the compromised PC as a proxy, and eliminate Windows processes and services, such as those for anti-virus and firewall software, making the machine even more vulnerable to follow-on attacks.
America Online is one of the participating vendors in the IMLogic Threat Center, a centralized database of IM and peer-to-peer threats and exploits. Other companies participating in the Threat Center include Microsoft, Symantec, Yahoo!, and IBM.
Stay connected and informed by visiting our Enterprise IT Community!

Become a member today for instant access to free InformationWeek research, expert advice, peer perspectives, and more on the following topics:
- Application Performance Management (APM)
- Security Management
- Mainframe 2.0
- IT Automation
- Service Assurance
Also, visit our Government, Retail and Financial Services groups to see how these technologies apply specifically to those industries.
NOTE: Offer valid for U.S., U.S. possessions, & Canada only.