Security Experts Warn MSN Files Contain Malicious Virus

Security experts at MSN said that MSN users are cautioned against MSN files as they contain a computer virus called "Win32/Pushbot.T" which can infect their systems.

The reports also revealed that some program creators are using Instant Messaging (IM) to spread harmful program like worms and viruses. These viruses spread when a user opens an infected file like pornographic picture sent through IM by someone who appears to be familiar.

Further, the infected system continues spreading the virus to everyone on the IM list without the knowledge of the user. Generally, the virus is not sent deliberately by the familiar person.

Security experts also added that spammers choose subject line or message content which attract users to open the attachment. The subject line or message content include "What the hell you were drinking?" or "Wow? Is that really you?"

As per MSN, Win32/Pushbot.T is a computer worm that circulates through Messenger and also contains back door features. The worm sends messages to random Messenger contact list with a copy of itself attached in a .Zip archive.

Besides, the file name of the worm executable carried in the archive may differ and can have a double extension. For example, the zip archive may be called PICS.ZIP and carries a file named "DSC00432.jpg.exe" or "IMG34814.pif" which is not a picture as it seems, but a 32-bit executable and a copy of the worm.

Security experts have given a advice that before opening attachment, users should not instantly accept all the files as they can cause harm to the system. It is also suggested that before opening, ask the familiar person whether he/she has sent an attachment. It the familiar person denies, user should not click or accept the file. Further, users should also change their password regularly to stop the virus from accessing credentials to log in on another system.

Worm Win32/Pushbot.T can install other harmful software; therefore, manual removal is not suggested. To discover and remove this Trojan and other harmful software that may have been downloaded, run a full system scan with an updated antivirus software.

Related article: Securities Push Up A Must For Web Companies

» SPAMfighter News - 1/29/2009