lastnight i was on aol instant messenger, and a friend sent me an message with a link. i knew him, so i clicked it, and it started to do all sorts of crap to my laptop. now, everytime i log into istant messanger, it sends out the same link to EVERYONE on my buddy list. then, at a given time interval, it sends it out again.
i ran a couple virus scans, and it did nothing. anyone know how i might be able to get rid of this?

http://www.jayloden.com/AIMFix.exe it looks for viruses in aim my computer was doing the same thing till i downloaded this the link is right to the down load if you want to look at the site it is http://www.jayloden.com/aimfix.htm

ps you might want to give that to your buddy also or everyone on you buddylist that ims got sent to

My Norton detected that a long time ago at the office.

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Do a free scan there ^^^^^^

It should find and remove it also.

This just goes to show you that you can't even trust messages, attachments and links from known sources anymore :)

Oh yeah - and NEVER download anything in a link from a friend without asking them what it is first! Also, last time I saw this it said something about "omg look at this picture!" as the message and provided a link to a .com file...nothing uses .com files for one and two it should not have automatically opened, normally you would click "OK" to open it.

Curious - what are you using for antivirus?

i have mcafee. i did a search for all files created during the time that this happened and found a file that was created within about a minute of when i got the message, i deleted the file and it seemed to be gone. i got on AIM and no messages sent them selves out. im still going to run those scans anyway.

eEDIT: i just signed on and it still did it.
Shifty, i ran that scan lastnight and it came up with nothing.

i iran that AIM fix, and it found soem stuff and got rid of it, and for the last few minutes it hasnt sent anything out... ill cross my fingers

it might be a case of it actually being considered spyware instead of a virus or trojan. try housecall, maybe?

http://housecall.trendmicro.com

if you want to be sure if nothing is awry, please post a Hijackthis log and I'll look it over (or PM it to me)