On CBS.com: A therapist is brutally murdered
BNET Business Network:
BNET
TechRepublic
ZDNet

By Joris Evers
Posted on ZDNet News: Jul 21, 2005 12:34:00 AM

A new instant messaging worm that masquerades as Apple Computer's iTunes application and drops adware on infected Windows PCs has been found.

The pest is a new version of the Opanki worm and spreads using America Online's AOL Instant Messenger, security companies said. It was first discovered on July 14 and isn't currently spreading at a high rate, Bruce Hughes, a senior antivirus researcher at Trend Micro, said on Wednesday. "It isn't infecting people at a high rate," he said.

The worm, dubbed Opanki.Y by Trend Micro, arrives in a message with the text: "This picture never gets old." It includes a link to a file that when downloaded is installed as "ITUNES.EXE," possibly to trick people into thinking that it is associated with Apple's popular media player.

If it runs, the worm opens a back door on the infected PC and downloads and installs four adware applications, Trend Micro said. Adware is software that displays pop-up advertising on a computer screen.

"We are seeing more worms and viruses that are dropping spyware and adware," Hughes said. "The virus writers get money for every install."

In addition to Opanki.Y, a worm called IM.Dynu hit users of AIM and MSN Messenger on Wednesday. It infects PCs via e-mail, the Web and instant messaging services, IMlogic said in an advisory. The Web addresses it uses in the instant messages can differ and so does the payload, the security company said.

The advice to instant messaging users is to be careful when clicking on links in messages--even when they seem to come from friends--and to use up-to-date antivirus software.

  • Talkback
  • Most Recent of 11 Talkback(s)
Don't Worry, It Installs Claria...Microsoft Antispyware Says It's A-OK!
;) (Read the rest)
Posted by: itanalyst Posted on: 07/21/05 You are currently: Logged In | Log out
How depressing Richard Flude   | 07/20/05
In other Apple news Richard Flude   | 07/20/05
Was that post supposed to really say anything John Zern   | 07/21/05
Hmmm... gfeier   | 07/21/05
Uh huh nikoli   | 07/21/05
Well now the apple name Protector   | 07/21/05
Pathetic Virus writers Paco20   | 07/21/05
Re: Pathetic Virus writers Uncle Buck   | 07/21/05
Re: Pathetic Virus writers Stan57   | 07/21/05
Now for those AOL subscribers who Boot_Agnostic   | 07/21/05
Don't Worry, It Installs Claria...Microsoft Antispyware Says It's A-OK! itanalyst   | 07/21/05

What do you think?