Second Kazaa virus - 07/04/02 06:30 AM
A new virus called Backdoor.K0wbot.1.3.B replicates itself, infecting KaZaA users who unknowingly download an infected file. Backdoor also infects via the IRC remote-control backdoor component -- hence the name. As "Tech Live" reports tonight, Backdoor is not the first virus to infect KaZaA users and is a reminder of the risk of infection that can sometimes come with using file-sharing services.
Once executed, Backdoor can gain control of a victim's computer. Specifically, the the code can update the virus by downloading a newer version, reporting information about the infected system -- CPU speed, memory, operating system version, uptime, Internet connection type, local IP address. It also reports installed software and performs different IRC commands, including flooding other users of the chat server.
On computers running the KaZaA software, Backdoor replicates copies of itself, making hundreds of copies and renaming them as tantalizing media downloads.
Thanx TechTv
Once executed, Backdoor can gain control of a victim's computer. Specifically, the the code can update the virus by downloading a newer version, reporting information about the infected system -- CPU speed, memory, operating system version, uptime, Internet connection type, local IP address. It also reports installed software and performs different IRC commands, including flooding other users of the chat server.
On computers running the KaZaA software, Backdoor replicates copies of itself, making hundreds of copies and renaming them as tantalizing media downloads.
Thanx TechTv
