Worm takes centre stages

The South American-originated virus, "IRC/Stages.worm" (with aliases LIFE_STAGES.TXT.SHS and VBS_Stages.A), has infected three Australian organisations, Andy Liou, marketing manager with Trend Micro Australia, said today.

Trend Micro received "confirmed reports" from business customers that two of the companies were motoring and government organisations in NSW. One is a nationwide subsidiary of a US manufacturing company, Liou added.

However, Dean Stockwell, professional services director of Network Associates, claimed that 20 Australian businesses from the telecommunications, manufacturing and finance sectors have been hit.

According to a Network Associates alert issued today, the virus build is similar to that of the Love Bug. It modifies and re-releases itself by attaching itself to email messages.

It arrives in the following format: Subject: Funny, Body: The male and female stages of life.

The worm was designed to spread quickly via email spamming, according to the antivirus vendors. It takes advantage of installations of Pirch, Outlook and mIRC, also spreading to available mapped drives.

Moreover, it deletes the registry editor feature on Microsoft Windows, deleting system functionalities such as keyboard keys, according to Liou. "Even if you delete one or two files, there is no quick and easy way of erasing it," he said.

Because the virus appears with joke titles in attachments, this will make it harder for users to detect, Liou said. People are falling for the virus due to its "social engineering", he believes.

"This virus will grind email systems to a halt," Stockwell said. "Nobody is safe from this virus."

Two Sydney organisations' email systems have "completely crashed", with both experiencing "different" levels of exposure, according to Stockwell. He declined to name the companies.

However, Stockwell insisted the bug is "not a huge risk" to business operations, provided companies immediately update their scan engine.

Network Associates and Trend Micro received the alert from their US parents on Saturday. Because the alarm was raised on the weekend, businesses have been slow to respond to the alert, the vendors believe.

The virus has also been detected across five US corporate networks and in India.

Network Associates speculates the "stages" virus was written by the same author as last year's Bubbleboy.

Recommended

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Helen Han

PC World

Comments

Comments are now closed.

Most Popular Reviews

Follow Us

Best Deals on GoodGearGuide

Shopping.com

Latest News Articles

Resources

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?