peat moss
12-29-2005, 02:52 AM
Beta Messenger is really a botnet recruitment tool
Antivirus vendors are warning users to avoid a new Trojan masquerading as a beta download of MSN Messenger 8, which doesn't exist in the public realm.
The Virkel worm, already circulating in various incarnations as well as under the alias Chod, arrives in an instant message box touting "MSN Messenger 8 Working BETA" and "Messenger 8 BETA has been leaked!" Those that take the bait and click a link not only download the Trojan but also spread the worm via instant message to anyone in their contact list. Thus, the message appears to come from a trusted source when sent to the next batch of potential victims.
In addition, Virkel shuts down AV and security software. It also blocks access to security vendor sites by adding entries in an infected system's HOST file and deleting an entry in the system registry.
:source: Source: http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1154742,00.html
Antivirus vendors are warning users to avoid a new Trojan masquerading as a beta download of MSN Messenger 8, which doesn't exist in the public realm.
The Virkel worm, already circulating in various incarnations as well as under the alias Chod, arrives in an instant message box touting "MSN Messenger 8 Working BETA" and "Messenger 8 BETA has been leaked!" Those that take the bait and click a link not only download the Trojan but also spread the worm via instant message to anyone in their contact list. Thus, the message appears to come from a trusted source when sent to the next batch of potential victims.
In addition, Virkel shuts down AV and security software. It also blocks access to security vendor sites by adding entries in an infected system's HOST file and deleting an entry in the system registry.
:source: Source: http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1154742,00.html