October 12, 2004

'Funner' worm slithers through MSN Messenger

Only certain systems, including Windows XP, are vulnerable

Security researchers warned Monday of a new worm, dubbed "Funner," targeting Microsoft Corp.'s MSN Messenger IM (instant messaging) system.

The worm propagates by sending a copy of itself, disguised as "funny.exe," to contacts found through MSN Messenger. The worm then makes registry modifications and overwrites entries in the Hosts file, a list used to map IP (Internet Protocol) addresses to Web sites. Only certain Windows systems, including Windows XP, are vulnerable, according to security researchers.

Researchers currently grade Funner a low threat because of light distribution, though Trend Micro Inc. rates its damage and distribution potential as "high." Computer Associates International Inc. grades Funner's destructiveness as "medium," while Symantec Corp. reports fewer than 50 known infections so far. All three vendors have removal instructions posted in security alerts on their Web sites.

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.