Forum latest

Sophos spots Windows validation worm
Written by Gizmo   
Thursday, 06 July 2006 10:40

A new worm is on the loose, and it reportedly uses the guise of Microsoft's Windows Genuine Advantage program to lure its victims. UK-based antivirus firm Sophos plc reports that the Cuebot-K worm propagates via America Online Inc.'s AOL Instant Messenger program and registers itself as a system driver service called "wgavn." It runs automatically upon system startup, cloaking itself under the title "Windows Genuine Advantage Validation Notification." According to Sophos, it then disables the Windows firewall and opens a secret backdoor that allows malicious hackers to gain remote access, spy on users and potentially launch a distributed denial-of-service attack.


Comment in the forums!  

Don't Click Here Don't Click Here Either