Virus-like game annoying AOL IM users

A new Web-based game that lets players pretend to catch Osama bin Laden is annoying America Online Inc.'s (AOL's) Instant Messenger users with its virus-like self promotion, according to reports from users.

Free IT resource TechNet: More ways to know it, share it, and keep it running. Sponsored by Microsoft Free IT resource Attend the SOA Executive Forum: Breaking SOA Bottlenecks SOAExecForum.com/may2007 Sponsored by InfoWorld

The new game, called "Osama Found," grabs names from a user's AOL Instant Messenger address book and automatically sends those users instant messages with links to a Web page where the game can be downloaded.

America Online Inc. is aware of the problem and is considering legal action against the maker of the game, according to Andrew Weinstein, an AOL spokesman.

Osama Found is not a virus or Instant Message worm, but another example of what some call "adware," software that runs in the background on a computer and can be used by marketers to display advertisements and promotions on a user's desktop, Weinstein said.

AOL Instant Messenger users across the U.S. have reported receiving messages from correspondents (or "buddies") with links to the game's Web site, http://www.wgutv.com. Internet users who visit that site are prompted to install the small program, or applet, and play the game.

Once installed, the program allows the company that makes the game, PSD Tools LLC of Cambridge, Massachusetts, to send out what it describes as "additional content such as, but not limited to, advertisements and promotional messages to your computer and programs that may alter your home page to offer you content," according to a terms and conditions document that accompanies the installation program.

Also hidden in the terms and conditions for installing the program is language that allows the software to "interoperate with your current instant messaging client so as to permit the automatic sending of advertising messages originating from your Computer to your contact or 'buddy' list."

That may be a violation of AOL's terms of service, Weinstein said. Those terms prohibit using AOL Instant Messenger products to send unsolicited bulk communications or to authorize others to use an AOL Instant Messenger account to do so, he said.

AOL is investigating legal steps it can take to stop the distribution of the game.

"We think this is a slimy piece of adware that we want to protect our users from," he said.

AOL thinks the adware only targets AOL Instant Messenger users and will be updating its Instant Messenger home page with a warning about the adware and tips on removing it, Weinstein said.

Network Associates Inc. (NAI) also received reports of the game Tuesday and Wednesday.

Antivirus researchers at NAI's McAfee antivirus unit studied the Find Osama game and agree that it is not a virus or Trojan horse program, said Craig Schmugar, virus research manager.

The Find Osama game is similar in design to the so-called "friend-greetings" incident from October 2002, he said. In that case, an e-mail message inviting users to retrieve an online greeting card from the www.friend-greetings.com Web site tricked many e-mail users into installing an adware application.

The ruse demonstrates the importance of reviewing end-user license agreements carefully before installing new software programs. It also underscores the danger of downloading and installing unsolicited software, Weinstein said.