Subscribe

MSN worm does rounds

Carel Alberts
By Carel Alberts, ITWeb contributor
Johannesburg, 05 Jan 2004

A new worm that targets users of Microsoft`s MSN Messenger network is one of several threats in the wild, but a local vendor says the holiday season has been quiet on the infections front.

Anti-virus vendors Panda, Trend Micro and Network Associates warn that the threat level and distribution of the Jitux.A worm (W32/Jitux.A) remain high.

Jitux spreads through the MSN text chat application and tries to get users to download malicious code. The worm comes in the form of a URL, which downloads the "jituxramon.exe" file. According to Panda Software, when a user runs the file, the worm sends new messages containing the link every five minutes to all contacts stored in MSN Messenger.

The worm has no destructive effects, nor does it change the system configuration. It runs on Windows 95, 98, ME, NT, 2000 and XP.

And another one

According to Trend Micro, the PE_QUIS.A worm, also called W32.HLLP.Belzy@mm, has just been discovered. Quis spreads via Outlook and affects Windows 95, 98 and ME.

The worm infects all .exe files in the My Documents and C:progra~1mirc folders. Among other effects, it overwrites ring-tone files with the tune "Jingle Bells" and subjects the user to a quiz. Instructions on removal can be found on Trend Micro`s Web site.

Local perspective

Brett Myroff, CEO of Netxactics, the local distributor for Sophos anti-virus products, says there were several instances over the end-of-year period (such as the above) where more than one international vendor reported viruses or worms in the wild.

"This is the internationally accepted way of grading a threat," he says. "This means these viruses or worms are 'out there`. The actual rate of infection or damage then determines the level of seriousness vendors attach to any worm or virus."

Myroff says Sophos and Netxactics had few reports of infections over December.

Share