Information on buddypicture.net trojan



If you have a link in your AIM titled "buddypicture.net" it means your machine has been infected by the buddypicture.net trojan.

The virus exploits a flaw in Internet Explorer and forces the download of the trojan to your computer and runs it. When it starts, the trojan puts a link in your AIM profile that that forces the download of the trojan to your computer. Messages can be "I can't believe I found (your screen name)'s picture here HAHAHA" or similar. Once it changes your profile, it will begin downloading adware and spyware to your computer. Changing your AIM profile won't get rid of the virus, it will simply change it back on your next reboot.

If a link in your aim is titled "buddypicture.net" you will need to remove the trojan using adware removal software.

Removal:

You will need to run adware removal software on your machine, we would suggest the sites listed below,

Pastol - site contains software to remove spyware and adware

Spywarenuker - another piece of software to remove spyware and trojans

Besides their suggestion for spyware removal, you can always use the traditional Ad-ware and Spybot S&D. Running your AV and a Trojan Cleaner such as theCleaner is recommended.