WARNING Rootkit virus embedded in video via comment spam

[campylobacter]

Originally posted by campylobacter at
WARNING Rootkit virus embedded in video via comment spam

Lately, I've had to delete about half a dozen spam comments from various entries on my LJ & at other communities. They've all shared a commonality: a single embed & link to a YouTube video in Portuguese titled "Camarate: A confissao fe Farinha Simoes" or in English titled "Dying call from prison. Details about Portugal Premier Minister air-crash!"

DO NOT PLAY THE VIDEO.

The video contains a Windows rootkit virus that'll steal your personal info.

Known accounts that generate these spammy malware comments:

1. 1310ardfey 108 comments posted 
2. aldovid 98 comments posted
3. analiseacalo 93 comments posted
4. bolvul 86 comments posted
5. golubcavav 98 comments posted
6. hofmannfuvuw 119 comments posted
7. jonmeino 95 comments posted
8. justiczjatu 95 comments posted
9. mafirusii0 86 comments posted
10. marowov570 86 comments posted
11. meratee05250 97 comments posted
12. milburrujyvy 116 comments posted
13. millfordiqy 100 comments posted
14. ngpase 106 comments posted
15. omne807 98 comments posted
16. owenddhd 99 comments posted
17. proplasmoc 92 comments posted
18. rjwoily 99 comments posted
19. symanuvawe 80 comments posted
20. veatorecu 122 comments posted

Let's get LJ admins alerted to this exploit (the more reports, the better!) by following these instructions:


1. Hover your cursor over the little  userhead next to the username.


2. In the box that pops up, click the "Ban user" boxes that apply. (Community owners & moderators see the "in my communities" ticky box.)


3. Click the "Report a Bot" link to notify LJ admin of the spam account.




Alternate link to report a bot:
http://www.livejournal.com/abuse/bots.bml

Alternate link to ban a user:
http://www.livejournal.com/manage/banusers.bml

SOURCE: [Warning] Serious rootkit virus spreading in LJ comments by luma_chan

Comments

[lolmac]

Oh, that stupid vid link has malware in it? Figures. I've reported a dozen of those bots already. (I have a permanent bookmark on the report-a-bot page.) Of course, I've never clicked on the vid itself.

[campylobacter.livejournal.com]

Weeks ago when I first saw the spam (it was left by an account named either livejournal or lj, I played the vid until I got bored. Fortunately, I was on my Mac.