If you've ever had a blog or a web forum, you know the pain of bots - those insidious automatic (im)posters that fill your blog or forum with comment spam that points to porn. Trojan.MeSpam takes it one step further. Instead of relying on bots to do the dirty work, Trojan.MeSpam makes you the culprit. Once infected, every forum post you make, every webmail you send, and every blog comment you leave will also deposit a link pointing to a nefarious website.
According to antivirus vendor Symantec, Trojan.MeSpam registers itself as a Licensed Service Provider (LSP) on the infected system, then retrieves the message from a remote site and begins appending it to web-based communications. The attackers can change the message at anytime, so the exact link or any text involved varies.
Trojan.MeSpam can embed its message in IM chat messages through AOL Instant Messenger, Google Talk, and Yahoo! Messenger - as well as email messages sent via a wide range of webmail providers, including Gmail, AOL, Hotmail, and Yahoo webmail. For complete details, see the Symantec description for Trojan.MeSpam.
