Originally published November 29 2005
Unnamed worm spreads through AOL's Instant Messenger
by Mike Adams, the Health Ranger, NaturalNews Editor
A "nasty bundle" is downloaded when you click on a link that looks like a message from a buddy. Once the user clicks on it, malicious code is installed on the computer and spreads.
The unnamed worm delivers a cocktail of unwanted software, including a so-called rootkit, security experts at FaceTime Communications said Friday.
"A very nasty bundle is downloaded to your machine" when you click on the worm link, said Tyler Wells, senior director of engineering at FaceTime.
"This is the first time that we have seen a rootkit as part of the bundle of applications that is sent to your machine.
Resource center Identity theft Experts debate key issues in ID fraud.
The number of threats detected for instant-messaging and peer-to-peer networks rose 3,295 percent in the third quarter of 2005, compared with last year, according to a recent report from security provider IMlogic.
In addition to the "lockx.exe" rootkit file, the new worm delivers a version of the Sdbot Trojan horse, said FaceTime, which sells products to protect instant-messaging traffic.
Sdbot opens a backdoor on the infected PC.
The worm also places several spyware and adware applications, including 180Solutions, Zango, the Freepod Toolbar, MaxSearch, Media Gateway and SearchMiracle, the company added.
The company said it also has seen the pest hit other computers.
"It is still out there, and it is definitely something the user should be leery of," Wells said.
Worms on IM networks can spread rapidly.
They appear as a message from a buddy with a link that looks innocent, but in fact points to malicious code somewhere on the Internet.
Once the user clicks on the link, malicious code is installed and runs on the computer.
The worm then spreads itself by sending messages to all names on the victim's contact list.
The advice to users is to be careful when clicking on links in IM messages--even when they seem to come from friends--and to use up-to-date antivirus software.
All content posted on this site is commentary or opinion and is protected under Free Speech. Truth Publishing LLC takes sole responsibility for all content. Truth Publishing sells no hard products and earns no money from the recommendation of products. NaturalNews.com is presented for educational and commentary purposes only and should not be construed as professional advice from any licensed practitioner. Truth Publishing assumes no responsibility for the use or misuse of this material. For the full terms of usage of this material, visit www.NaturalNews.com/terms.shtml