Another KaZaA worm has hit the network.
Get the info here.
“The Kazaa file-swapping network has been hit by another worm, just months after the first such attack, according to antivirus vendors.
Antivirus company Sophos said it had received several reports of the KWBot worm in the wild. KWBot appears to be the second worm to hit the Kazaa network, which fell prey to Benjamin worm in May.
KWBot spreads in a similar way to Benjamin, by altering Windows registry keys and then disguising itself as files that are likely to prove popular with file-swappers. It makes particular use of the names of movies and applications. When first executed the worm copies itself to the Windows system folder as xplorer32.exe, said Sophos. It will then create two registry entries so that the copy is run each time Windows is started.
The worm may also allow attackers to gain control of an infected computer using commands transmitted over Internet Relay Chat, said Sophos.
Kazaa is not alone among file-swapping networks that have been targeted by virus writers. The Gnutella file-swapping network was hit by a proof-of-concept worm in February.”
Related Posts
- Duload Worm spreads through KaZaA network
- New worm/Trojan: Kazoa.C Spreading fast thourgh Kazaa and IRC
- W32.Benjamin.Worm on KaZaA
- Worm targets P2P
- W32.Benjamin.Worm creator tells why he infected KaZaA
Loading ...
