IndiaStand

Be ready to welcome a new worm on your PCs. Don’t be scared, and no need to get into the literal meaning of the word worm. We are here talking about the worm in terms of computer technology. A new worm has come which is even more sophisticated in its social engineering and payload, security firm Bkis said.

Bkis stated that the malware arrives via instant message through Yahoo or Skype with any one of a number of messages. He wrote at the blog spot messages including “Does my new hair style look good? bad? perfect?” or “My printer is about to be thrown through a window if this pic won’t come out right. You see anything wrong with it?”

Talking about its functioning, the message includes a link to a Web page that looks like it leads to a JPEG, or image file. As soon as the link is clicked on, the browser displays an interface that looks like the RapidShare Web hosting site and offers up a ZIP file for download. The file so extracted is actually an executable file with a .com extension.

Yahoo Worm Realy a hit

This new worm can facilitate only the PCs having Yahoo Messenger or Skype. The malware, which Bkis has detected as “W32.Skyhoo.Worm,” disappears if the computer does not have Skype or Yahoo Messenger installed. It automatically sends messages with varying content and malicious links to contacts in the victim’s IM list and automatically injects a malicious link in e-mail messages and Word or Excel files that the user is composing, Bkis said.

Some other key features of this malware includes its connectivity to an IRC server to receive remote commands, blocks antivirus software, uses a rootkit technique to hide its files and processes and automatically copies itself onto USB drives to spread, according to Bkis.