25 February 2004
Filesharers are prime targets for musical worm
BitDefender analysts have received a copy of a virus later dubbed Netsky.C. The code is extremely similar to that of the previous two variants, which has prompted BitDefender analysts to the conclusion that they are the work of the same author.
The virus spreads by two different routes. On the one hand, it mails itself to adresses found on the infected computer in the form of an executable attachment. On the other hand, it copies itself in directores whose names contain the string "shar" (which is what the default file exchange dir in programs such as Kazaa looks like).
In a display of unusual behavior, the virus disables bot various antivirus programs and certain viruses by deleting relevant registry keys.
But probably the strangest aspect of a virus that looks quite serious is that it was scheduled to play random sounds on you computer's speaker today between 6 and 9 am (local). Workers arriving at their offices this morning may expect to find them alive with odd digitized noises.
As usual, a free removal tool has been issued by BitDefender labs specialists. Those of our readers who are also avid chatters or sharers would be well advised to take a look at our free instant messaging antivirus solutions.
MEDIA RELATIONS
[email protected]INDUSTRY ANALYST RELATIONS
[email protected]INVESTOR RELATIONS
[email protected]