Internet worms fill computers with unwanted advertisements

A new Internet worm is disrupting America Online Instant Messenger users both on campus and beyond.

The most recent adware, which many believe to be a virus, was first seen last week and poses as a link to a new Web site. It passes itself via a peer-to-peer method among IM users.

The site contains a number of false headlines. One claims that Osama bin Laden has been captured, while another says that Saddam Hussein has escaped from prison. In order to access a video clip off the news site, visitors are asked to download a "News Player Applet."

Hidden within this download's "End User License Agreement" is permission to distribute the link to all members of the visitor's Buddy List.

The problem is that most instant messengers, eager to view the news clip, bypass minor details written into the EULA. The Osama adware is the newest addition in a long series of worms and viruses to plague Instant Messenger.

The company behind the recent adware is Buddylinks, a division of PSD Tools. "Our aim is to bring people on the Web closer together with our patent-pending technology," the company's site said.

As of Feb. 12, two days after the Osama worm appeared, Buddylinks updated their support page with detailed instructions as to how to uninstall the program.

According to America Online spokesman Andrew Weinstein on InstantMessagingPlanet.com, "This is probably a violation of our AIM Terms of Service, which prohibit spam or using an account to spam. We're investigating legal steps that we might take. We're obviously working to protect our users from this adware."

Efforts to combat the worm are hindered by legal intricacies. "People are technically giving their permission to mass-mail as long as they agree to the EULA," said Ken Durham, director of malicious code for iDefense, an information security company.

"There is hesitation on the part of antivirus companies to install software against these programs. They don't want to get sued because it is, in fact, legal."

Another issue to contend with is ambiguous terminology. "There is no international standard or definition of different malicious code terms such as 'viruses' and 'worms,'" Durham said.

Instant messaging, according to Durham, is an ideal vehicle for adware since "it comes from a friend and is more immediate than e-mail. It grabs your attention rapidly."

America Online's help site recommends fighting the adware by installing anti-adware programs, making critical Windows updates and maintaining antivirus software.

Durham said that one feature of the Osama adware was surprising to him: "There is no financial gain here. It appeared to be here because of notoriety, 'because I could,'" he said.

Please note All comments are eligible for publication in The Daily Pennsylvanian.