NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home / News / Security / Virus alerts

Virus alerts


Windows Media Player Infection Sends Users to QuickTime

Beware! WORM_VB.ZAA has a high distribution potential

By Bogdan Popa, Security and Search Engines Editor

21st of December 2007, 19:31 GMT

Adjust text size:


The message displayed by the worm
Enlarge picture
WORM_VB.ZAA is a new kind of worm that attempts to infect the Windows computers, being executed once the user starts Windows Media Player. Security company Trend Micro wrote that the worm affected most versions of the operating system powered by Microsoft, including Windows 98, ME, NT, 2000, XP and Server 2003. But, what's more important is that
it has a high distribution potential bundled with a medium damage potential, so extra-caution is recommended, if you want to keep your computer protected. Now, let's see more details about the infection.

Just like many other 2007 worms, WORM_VB.ZAA attempts to spread itself by copying its files on every clean removable drive connected to an infected computer. When the device is plugged into a clean system, the infection is automatically executed and copies its files on the computer. Classic, I would say. Obviously, it also drops an Autorun.Inf file to be sure it is executed every time a new drive is connected to the PC.

Trend Micro informed that WORM_VB.ZAA can be easily downloaded by visiting malicious websites equipped with the worm. In addition, it can also be deployed by another malware that has already been installed on the system.

And now, the juicy part: the worm is executed once the user starts Windows Media Player and displays the following message: "Please Install QuickTime Player to play this file!"

"This worm modifies a certain registry entry to hide file extension names. It also hides files with System attributes by modifying another registry entry", Trend Micro wrote.

So, next time you're advised to switch to another media player (such as Apple's QuickTime) and abandon the famous application that comes with the Windows operating system, you should start a full system scan, because you may be infected with WORM_VB.ZAA...

TAGS:

security | worm | windows | infection
Read by 2,157 user(s) | Add comment | Link to this article TWEET THIS


Article rating:
Good (3.2/5) 7 vote(s)    

Subscribe to news | Print article | Send to friend

© Copyright 2001-2009 Softpedia
Contact:

 

 

SEARCH THE NEWS ARCHIVE :




Today's News
| Yesterday's News | News Archive


MORE RELATED ARTICLES:


BitDefender Reports on Threats

Malware Author Apologizes for Windows Worm

Windows Vista Immune to Skype Worm by Default

Next Gen Hybrid Web Worm Coming to IE, Firefox and Safari

Windows Infection Affecting All Drives, All Networks, All Removable Devices!

How About A Virus That Restarts Your Computer?

User opinions:


Comment #1 by: Aericron247 on 22 Dec 2007, 08:38 GMT reply to this comment

I wonder who made the worm? A very pro mac? or just some jerk (huge lack of a better word) trying to ruin peoples pcs?

Share your opinion:

Your Name:
Your Email Address:
(will not be used for commercial purposes)
Solve this to prove you're not a bot: =
Your review/opinion:

 




Windows tabGames tabDrivers tabMac tabLinux tabScripts tabMobile tabHandheld tabGadgets tabNews tab

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   ENTER NEWS SITE   |   ENGLISH BOARD   |   ROMANIAN FORUM