AIM Worm

[iago]

That being the case, this would be more of a virus and not worm. However, some of these malicious AIM-related activities can be more defined as 'trojans'. I'd concider a worm to be something which spreads just by a computer user with a vulnerable version of the program, so that they can get infected without downloading and/or running outside files.

If it infected the AOL executable so that every time you ran AOL it sent itself out, that's a virus. 

If it was a program that you ran, and it looked like a game, but it was really spreading secretly, then it's a trojan. 

The way it sits, it's a worm.  The same way Netsky and Mydoom and Bagel are worms. 

[iago]

http://70.84.54.154 /~tashreba/pic1253.com

From VirusTotal:

Antivirus   Version   Update   Result
AntiVir   6.32.0.6   10.04.2005   no virus found
Avast   4.6.695.0   09.30.2005   no virus found
AVG   718   09.29.2005   no virus found
Avira   6.32.0.6   10.04.2005   no virus found
BitDefender   7.2   10.04.2005   Backdoor.Sdbot.ADQ
CAT-QuickHeal   8.00   10.04.2005   Trojan.Pakes
ClamAV   devel-20050917   10.04.2005   Trojan.Spybot-123
DrWeb   4.32b   10.02.2005   no virus found
eTrust-Iris   7.1.194.0   10.03.2005   no virus found
eTrust-Vet   11.9.1.0   10.04.2005   Win32.Seenbot.DY
Fortinet   2.48.0.0   10.04.2005   PossibleThreat
F-Prot   3.16c   10.04.2005   no virus found
Ikarus   0.2.59.0   10.04.2005   no virus found
Kaspersky   4.0.2.24   10.04.2005   Trojan.Win32.Pakes
McAfee   4595   10.03.2005   W32/Sdbot.worm.gen.h
NOD32v2   1.1240   10.03.2005   probably unknown NewHeur_PE virus
Norman   5.70.10   10.04.2005   no virus found
Panda   8.02.00   10.04.2005   Trj/Multidropper.AXJ
Sophos   3.98.0   10.04.2005   W32/Sdbot-ADQ
Symantec   8.0   10.03.2005   W32.Allim
TheHacker   5.8.2.117   10.03.2005   no virus found
VBA32   3.10.4   10.02.2005   no virus found

[RoMi]

It in some way infects the actual AIM file because now when my friend logs on AIM it pops up with an IO error, but still works.