newsfox
newsfox
Contact:
Julian Mattocks
Phone: +43-1-81140-308
E-Mail: mattocks@pressetext.com
KEYWORDS:
HIGHTECH
Wed, 19.01.2005
Print
pte20050119014 Computer/Telecommunications
Pressbox Pressbox
New worm poses as porn filter program
Baba-C offers to remove adult content from Windows PCs

Abingdon (pte014/19.01.2005/10:30) - A new worm that fools computer users into believing that pornographic content has been found on their PC has been discovered by experts. As the British IT portal The Register http://www.theregister.co.uk reports, users are told that adult material on their PCs can be hidden by running an attached program called "Evidence Cleaner", which is actually the Baba-C worm.

The worm sends e-mails with the subject line "Important! XXX sites found on your computer". They contain the following message: "Windows Evidence Cleaner has found XXX content on your computer. You can hide your activities with Evidence Cleaner Service. To run Evidence Cleaner click to quick shortcut attached. Warning! Your copy of Evidence Cleaner will be expired after 7 days. Today you can register for FREE. Please check attached instructions for more details." Users tricked into running Baba-C further the spread of the worm and open up backdoor access for hackers to gain access to the system.

"Many people are worried about the adult material that inhabits areas of the Internet, and don't want it to reach their PC. It's also clear that the Internet is widely used for accessing hardcore sexual material," said Graham Cluley, senior technology consultant at Sophos. "Either way, many people want to ensure that their PC contains no evidence of XXX content and may be tempted to follow this e-mail's instructions if they are sent this worm. The Baba-C worm is using a dirty trick," he added. Sophos advise users to keep their anti-virus software up-to-date and never open an unsolicited e-mail attachment. Thus far, there have only been a small number of reports of the Baba-C worm.

(end)
Submitter: newsfox
Contact: Julian Mattocks
Phone: +43-1-81140-308
E-Mail: mattocks@pressetext.com
Website:
newsfox