windshell
Site Admin
Joined: 18 Jan 2007
Posts: 59
|
 Posted: 08/03/07 - 12:26 Post subject: Deletemusic worm threatens MP3 collections via flash drives |
 |
|
Security experts have discovered a worm that hunts down and deletes MP3s on infected PCs.
The worm is only low risk, although its unusual payload could give a nasty surprise to an ardent music fan. The motivation of the hackers who created it is unclear.
"The authors of this worm are more likely to be teenage mischief makers than the organised criminal gangs we typically see authoring financially-motivated malware these days," said Graham Cluley, senior technology consultant for the security vendor Sophos.
"As such, it's not something we would lose an awful lot of sleep over, but there are some lessons that computer users should learn to minimise the chances of infection," he said.
The worm spreads via removable flash drives, reminiscent of the way viruses spread via floppy disks decades ago. That may be an attempt by the authors of the worm to bypass email filters and web gateway filters that block malicious software, Cluley said.
Symantec, which calls the worm W32.Deletemusic, said in an advisory that the worm copies itself to all drives on a PC. It also creates an autorun file to start itself whenever a user accesses a drive.
The worm affects PCs running Windows 2000, 95, 98, Me, NT, Server 2003, XP and Vista, Symantec said. Users could disable the autorun feature in Windows that automatically launches programs on CDs or USB drives, Cluley said.
It's not the first malicious software to go after music files. Two years ago, researchers saw the Nopir-B worm, which posed as a utility to make copies of DVDs. Once on a machine, it displayed an anti-piracy graphic and tried to delete MP3s and other files.
Last year, a Trojan horse program called Erazer took the destructive activity a step further, wiping out MP3s as well as movies, Cluley said.
Source: pcadvisor.co.uk |
|
