New Worm On Yahoo! Messenger will Gosod dangerous Browser

Foster City, California - May 22, 2006 - Experts in the research FaceTime Security Labs ™ identified and reported to the threat of a new worm on the Yahoo Messenger. Facetime scientists confirm the existence of a new worm called yhoo32.explr. This worm will install a web browser by the name of 'Safety Browser' and will put spyware on the PC of the victim. Because Safety Browser uses the same icon with IE, then the victim can easily mengasumsi that it is Internet Explorer. This is the first incidence of a malicious software (malware) to install their own web browser on a PC without user consent. Worm that can reproduce itself is spread through contact list of Yahoo! Messenger on a PC that was infected, how to send a link to the website at the time of the user are in talks messenger. This link will lead to a website that will upload the file to the victim in the PC, and installs Safety Browser. Spam over Instant Messenger link is always known as Spim. According to Tyler Wells, Senior Director of Research at FaceTime Security Labs, "This malware is one of the most bizarre and most dangerous that we met in several years." "This is the first case where a PC web browser hijack without the user's awareness of their own. Some type of browser 'evil' is similar, such as' Yapbrowser 'have been demonstrating the potential for serious damage by directing users to content that is potentially illegal," he added. Description Name: yhoo32.explr Type: Worm and Browserware The target: Yahoo! Messenger Additional Information: Malware akan menginfeksi this PC with two elements. The first element is a web browser called "Safety Browser". Stand-alone application does not have this feature and uninstaller disguise themselves through the Internet Explorer logo. This application is also the home of the hijack Internet Explorer and directing users to the Safety Browser's homepage (demoplanet.tv). This application also play music repeatedly (loop) at the time of the user running Safety Browser. Second element is a worm that can reproduce themselves. Worm reproduce themselves in a way to enter a link in messenger conversations on the infected PC. When users who have been infected with a new conversation and join the conversation that already exists, a link will be inserted at a certain point in the conversation.

Twitter Delicious Digg Facebook Stumbleupon RSS