Message

Hi there! Welcome to internet security world.

Nov 14, 2007

'Bush' worm that dances into IM


Check out this animation of Bush, so says a message popping up in your MSN Messenger. If you click on the link that follows to see the US President letting his hair down, you will unwittingly invite a worm to do some fast-paced moves inside your computer. The worm Worm.Win32.VB.au spreads with the help of a message written in Spanish, which reads, "mira esta animacion de bush", coming from known and unknown contacts. Translated into English, it reads, "See this animation of Bush". After getting into a victim's computer, the worm quickly sends the malicious links to all contacts present. The instant messaging (IM) worm is written in Visual Basic (VB) language & has a size of 122,880 bytes. It creates a few registry entries so it gets executed every time the computer is started. The malware does not contain any dangerous payload in its present form. But similar methods can be employed by virus writers in poliferating more destructive worms or Trojan downloaders in a possible second wave of attacks. Users affected with Worm.Win32.VB.au can download and run MicroWorld's free anti-virus utility MWAV to clean their computers.

No comments: