KaZaA Virus Discovered
Kaspersky Laboratories has discovered what may be the first virus unique to the peer-to-peer file sharing network, KaZaA. (ExtremeTech)Kaspersky Laboratories has discovered what may be the first virus unique to the peer-to-peer file sharing network, KaZaA. According to an advisory posted late on Friday, the Worm.Kazaa.Benjamin virus transmits itself using the KaZaA network. According to the virus definition, however, the virus only appears to spread by manual transmission, or voluntary downloading of affected files. In fact, the worms effects appear to onlly be to open a web page hosted on a German site. Kaspersky hasnt associated any worms or trojans with the web page itself.
When the worm is installed, it generates an error report bulletin with an acknowledgement button. The worm then copies itself to the %WinDir%\SYSTEM directory as EXPLORER.SCR, and upon the launch of the KaZaA file-sharing program renames several copies of itself under various names while making the directory open to the public. The net result is that unsuspecting users download copies of the virus, spreading it.