Kaspersky Lab, the leader in antivirus security software, sounds alarm on new hazardous virus-like program, Win32.PrettyPark.

The program is a kind of "worm" spreading itself via the Internet. From user's viewpoint, it appears as a utility named PrettyPark, attached to an e-mail message. Once the program is run by an incautious user, it installs itself at the infected computer and sends another batch of infected messages (containing the same malicious attachment) to the addresses found in Windows address book. On top of that, it sends information about local system settings and passwords to a certain user at IRC channel. Thus the program is reasonably classified as a "trojan horse", designed to steal the passwords.

The data reported by the worm to its unknown master includes not only local passwords but also system configuration, list of disks, information about directories, and plenty of data which are definitely confidential: Internet access phones and passwords, Remote Access Service logins and passwords, information about ICQ users, and so on. The program is also able to create and delete directories, send and receive files, run and delete them, etc.

Kaspersky lab has already added necessary data for detection and elimination of Win32.PrettyPark into regular database update of its AVP family of products.

Because of appearance of the new "trojan horse" Kaspersky Lab advises all users to be extremely cautious with the files sent to them from suspicious sources. More details about computer viruses, including Win32.PrettyPark, are available at the AVP Virus Encyclopedia website at http://wwwviruslist.com.

Source: InfoArt News Agency

Is this material of interest to you?    Yes;   Partly;   No;   Comments:

---