When the file attachment is executed, the worm copies itself to the Windows folder "Explorer.exe" and changes the Windows registry so that the code activates every time the computer is switched on. Anti-virus specialists are warning UK companies of...
If an infected machine is restarted, WINEVAR displays the message: "Make a fool of oneself: What a foolish thing you've done! MessageLabs first spotted the worm on 22 November and has seen around 300 copies in the last 24 hours.
When executed, the file becomes resident in memory and sends messages to other MSN Messenger users every five minutes, prompting them to download the worm's code, contained in a file called jituxramon.exe.
This means the worm is a dangerous threat and is difficult to contain. When the file is opened it displays a message "The file could not be opened! The worm also searches for folder names containing "share" or "sharing" and copies itself to those...
Email screening company MessageLabs said it had intercepted more than 23,000 copies of the variants in the first five hours of their existence. McAfee Avert, the virus-tracking squad at the antivirus software maker, rated the worm a "medium on...
He said: "I would love to find a free piece of software which I could offer to put onto all university and student laptops, and smart phones, which would be able to send 'stealth messages' back to a source after the laptop had been stolen.
Did you find this white paper useful? 1 out of 2 users found this white paper useful
White Paper RSS
Download
Register
