Twitter is under a phishing attack.

In this period an attack is developing on Twitter. It consists into receiving direct messages containing "lol, is that you" or "lol, this is funny, followed by a link. When you enter the link, you will be asked to enter your user and password, and, after this procedure, your account will start sending the same messages. If you got the message, you shouldn't worry, but if your account starts sending these types of messages by its own, change your password immediately.

The messages will take you to a page from allinonecontracting.com, which links after to bzpharma.net. Anything you're doing, do NOT click on these links.

hi5update.exe, a new virus on HI5.

A new virus that attacks HI5 has been seen for the first time a few days ago. Users reported that it requests them to download "hi5update.exe" which will steal their password after installation. It has also been reported that the virus can be found on a few Romanian websites. The main idea is that you should NOT download an executable file which is named "hi5update.exe". I found informations about this virus from Romanian bloggers, who already submitted it to anti-virus companies in order to help them to offer users protection as soon as possible.

If you're already infected, try to do the following:

1)delete from C:\Windows\system32:

• winlog.exe
• boot.exe

2)delete from registry the following keys:

• HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run \Font

3) Get Kaspersky Virus Removal Tool 2010 from Softpedia, and run it: http://www.softpedia.com/get/Antivirus/Kaspersky-Virus-Removal-Tool.shtml .

More informations can be found here: http://devirusare.com/2010/01/03/hi5update-exe-devirusare/ (for Romanian users, others can use Google Translate).