BigPond Cable Virus
Let this be a lesson to the unwary broadband user… Telstra BigPond Advance cable users have recently been afflicted by the Qaz worm, a medium-risk trojan which infects shared hard drives.
Qaz is a network worm with ‘backdoor capabilities’, that is, gives a third party remote access to a system. It alters the Windows registry, renaming Notepad.exe with Note.com. When the program is executed, it spreads through the local network altering the same file throughout. It then automatically emails the virus host, (possibly the author), the IP address of the susceptible machine. The email is sent to an IP address in China.
posted by bruce · at 8:40 am · filed under News