Skip to Content

New Worm Spreads Via MSN Messenger

Another reason to discard your Microsoft bugware for *superior alternatives: New Worm Spreads Via MSN Messenger

Known as Jitux, the worm is self-propagating and contains a link to a Web site that automatically downloads an executable file named "jituxramon.exe" to the PC. Once the file runs, the worm begins sending out copies of itself to all of the names in the user's Messenger contact list.

As easy as it would be to stop this worm dead in it's tracks by simply removing the downloadable exe - which I believe has already happened, this type of attack will most likely prevail, or until a more harmful vulnerability is found in Micro$oft's greed-fuelled applications. *Trillian and Mozilla 1.x, anyone? First slice of advocacy for 2004, ya dig? ;)

 

4 Comments

06 January 2004
12:55 pm

Chris

http://www.mozilla.org/projects/security/known-vulnerabilities.html

There are some pretty scary security exploits in Mozilla. Granted this is the list of fixed security flaws, but so too are the items in the list of IE flaws. They all have scary bugs, just as they all have fixes.

There is no secure method other than to totally unplug.

06 January 2004
12:59 pm

Chris

P.S. Trillian has fixes for the Messenger/IRC/AIM/Yahoo bugs. Conclusion of that fact, it too has extreme security flaws ;)

06 January 2004
01:12 pm

Chris

Anyway, that was my first Devil’s Advocate role for 2004 ;)

06 January 2004
04:32 pm

coda

Now you’re just trying too hard to be disagreeable, JV-boy – you don’t even IM. :P

The Trillian Patches are fixes for the latest Yahoo and MSN protocols, not bug fixes. Microsoft decided to lock out third-party software when they discontinued support for MSN Messenger clients older than version 5; the Trillian patch corrects this.

Leave a Comment

Your e-mail address is required, but will not be published.

 
 
 

Tags allowed:  <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>