New Worm On P2P Networks: WORM_WINUR.A
Soure For More Information:

Virus type: Worm
Destructive: No
Aliases: W32.HLLW.WINUR
Pattern file needed: 456
Scan engine needed: 5.200
Overall risk rating: Low
Reported infections: Low
Damage Potential: High
Distribution Potential: High

Description:

This peer-to-peer (P2P) worm spreads through the Kazaa and the WinMX file sharing networks. It also spreads to shared network drives with write access and drops a copy of itself on loaded floppy disks.

It configures MSN messenger to prompt users into sending a copy of itself to other MSN users.

This worm also has the capability to perform denial of service (DoS) attacks against certain Web sites.

It runs on Windows 95, 98, ME, 2000, and XP

Alert!

We've been contacted by Gladiator Anti-virus with a warning that a script at www.edonkey.com is installing a trojan via activex.

It is detected as TrojanDownload.Edonkey.Small by GAV and TrojanDownloader.Small.m by Kaspersky Antivirus (KAV) Note: ALL SETUP FILES (such es edonkey-gamer.exe, avril.exe, em.exe) does install this nasty....

BTW this trojan is around 10KB big

This web site is not the web site of the eDonkey peer to peer client. The "official" web site for eDonkey is http://www.edonkey2000.com/.

More info:

http://www.brain-pro.de/Seiten/advisory/advisor1.htm (In German. Click here for bad English translation)
http://www.spywareinfo.com/yabbse/index.php?board=6;action=display;threadid=3434
http://forum.gladiator-antivirus.com/index.php?s=&act;=ST&f;=10&t;=1536&st;=0