Google Messenger For Windows Virus

[geekerati]

This is just a heads up for everyone in case they receive this eMail, so please be careful and stay alert.

This morning, I was notified that I had new gmail. The message contained the subject “Google Messenger For WINDOWS” and showed me how to download and installed “Google Messenger For WINDOWS.” In the past we discussed Instant Messaging by Google - gIM, twice but nothing announed by Google on this topic as of yet. The email message contained an overview of the program:

Search Engine Journal

[tokkolo]

Thanks for posting that, always good to know. I don't like virusses. Let me quote it: So when you see a new message with “Google Messenger For WINDOWS” in the headline and the sender is 'Google' be carefull!

[geekerati]

Precisely Tokkolo They will catch a few people off guard because we are all in the frame of mind that everything 'Google' is good, when in reality these emails have nothing to do with our favorite search engine and empire. Thanks for responding.

[Gooooogler]

This is just a heads up for everyone in case they receive this eMail, so please be careful and stay alert.

geekerati:
You crawl the web for latest in gmail like Google crawls web in finding and indexing new pages..

Thanks for the info

[geekerati]

You're welcome Gooooogler This group gets me in the 'search mode', plus it's obvious I really do need to get a social life, maybe the warmer weather will help some.

[jeremywc]

Anyone with a copy of this file that can run it through a virus scanner and let everyone know exactly what the virus is? That way it would be possible to link to Symantec or something and get removal instructions or a removal tool.

-J

[geekerati]

I haven't been able to find anything specific about the virus itself. They had an actual eMail posted at CastleCops. (formerly Computer Cops) , that is kinda interesting.

[geekerati]

I found a little bit more information about the virus.

So I just got an e-mail from the Edvard Hawking from the "Gmail Staff" announcing Google Messenger for Windows. Funny stuff, exploiting recent speculation around Google's next move. The host is unreachable right now, perhaps maybe because are pounding them to get at some virus-infested installation file They attached a RAR file though, which is weird, because not many people have WinRAR. You'd think experienced h@x0rs would realize that ZIP is the archiving mechanism of choice, or an MSI installation file.

Inside the installation file is card.exe, which I can only imagine is this, and also Lpr123, which looks to be this.

Even though the e-mail is from a gmail.com domain, the address is clearly faked, since it says [email]staff.gmesssenger@gmail.com[/url] (3 S's) and I was carbon-copied along with 25 or so other people. Very dorky.

Monkey Methods

Another interesting thread on this topic, these guys want the virus sent to them so they can run it through their virtual PC. (VMWare) The infected file size is 1272k.

Here is a couple of pics of a "Gmessenger" the program that's is in developement, which is not related to Google or this story, but it's a bit interesting anyways. Enjoy!
1st pic
2nd

Lastly, they where trying to sell the domain on eBay. Check out the price! Lol

[DrakeWurrum]

What you need to realise is this: do you ever get an e-mail from the Gmail Staff?

[geekerati]

Yes I have, have a look but I no what you are saying. It's very rare that they would contact you. What I can't believe is when folks think their email provider/ ISP would ever send an email asking for their password.