main

Worm appears as Microsoft antipiracy program

Daniel Fleshbourne   on 30 June 2006 - 18:45 · 3 comments & 2594 views

Advertisement (Why?)
Security analysts have detected a new piece of malware that appears to run as a Microsoft program used to detect unlicensed versions of its operating system. The malware has been classified as a worm and spreads through AOL's Instant Messenger program, said Graham Cluley, senior technology consultant for Sophos, a security vendor.

Sophos is calling it W32.Cuebot-K, a new variation in the Cuebot family of malware. The worm has a range of malicious functions. After it's installed, the worm immediately tries to connect to two Web sites, a sign it may try to download other bad programs on the machine. Cuebot-K can disable other software, shut off the Windows firewall, download new malicious programs, perform basic DDOS (distributed denial of service) attacks, scan local files and spawn a command prompt, Sophos said.

View: The full story
News source: InfoWorld

Post a comment · Send to friend Comments · There are 3 additional comments
(2 replies) #1 Sniper101 on 30 Jun 2006 - 19:34
Hahahaha sounds abit Like WGA :p
Quote -
Microsoft program used to detect unlicensed versions of its operating system.
#1.1 Net-Margin on 02 Jul 2006 - 03:05
Only the WGA doesn't connect to other websites and download other malicious programs, and doesn't just mess around with CMD running malicious commands.
#1.2 dev0 on 03 Jul 2006 - 13:07
@Net-Margin:

Hmm, I do remember an issue with the 'call home' function of WGA and more...

Have you read this article? ZDnet: Is Microsoft about to release a Windows "kill switch"?

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)