A new worm that spreads via Microsoft's instant messaging client began badgering users Monday, several security firms said.
Dubbed Funner, the worm propagates by sending itself to all the contacts listed in the user's copy of MSN Messenger, Microsoft's IM client.
According to Symantec's alert, Funner may also try to contact a domain -- www.78p.com -- to download additional components.
Other than reproducing, Funner's main purpose seems to be to modify Windows' Hosts file on the compromised machine so that attempts to contact any of some 937 sites -- many of them Asian porn sites -- will be redirected to the IP address that matches 78p.com. That Web site, however, was offline as of mid-morning Monday.
Both Symantec and rival McAfee have labeled Funner as a low-level threat for the moment.
apparently not...tommyj27 said:could the purported outage have something to do with this?
http://www.techweb.com/wire/security/49900742
MSN Messenger, Microsoft's instant message service, is back up and running this morning after a routine maintenance operation went wrong, rendering the service sporadically unavailable for three days.
A glitch, which created problems logging onto the service from Saturday afternoon until Monday evening, appeared following routine maintenance. A Microsoft spokesperson told El Reg that the glitch was nothing to do with a worm capable of spreading via MSN Messenger yesterday. Reports from anti-virus firms on the worm, dubbed Funner, support this conclusion.
more likely they'll be promoted...Leslie said:somebody will have to give up their head on a platter.