Worm takes centre stages

The South American-originated virus, "IRC/Stages.worm" (with aliases LIFE_STAGES.TXT.SHS and VBS_Stages.A), has infected three Australian organisations, Andy Liou, marketing manager with Trend Micro Australia, said today.

Trend Micro received "confirmed reports" from business customers that two of the companies were motoring and government organisations in NSW. One is a nationwide subsidiary of a US manufacturing company, Liou added.

However, Dean Stockwell, professional services director of Network Associates, claimed that 20 Australian businesses from the telecommunications, manufacturing and finance sectors have been hit.

According to a Network Associates alert issued today, the virus build is similar to that of the Love Bug. It modifies and re-releases itself by attaching itself to email messages.

It arrives in the following format: Subject: Funny, Body: The male and female stages of life.

The worm was designed to spread quickly via email spamming, according to the antivirus vendors. It takes advantage of installations of Pirch, Outlook and mIRC, also spreading to available mapped drives.

Moreover, it deletes the registry editor feature on Microsoft Windows, deleting system functionalities such as keyboard keys, according to Liou. "Even if you delete one or two files, there is no quick and easy way of erasing it," he said.

Because the virus appears with joke titles in attachments, this will make it harder for users to detect, Liou said. People are falling for the virus due to its "social engineering", he believes.

"This virus will grind email systems to a halt," Stockwell said. "Nobody is safe from this virus."

Two Sydney organisations' email systems have "completely crashed", with both experiencing "different" levels of exposure, according to Stockwell. He declined to name the companies.

However, Stockwell insisted the bug is "not a huge risk" to business operations, provided companies immediately update their scan engine.

Network Associates and Trend Micro received the alert from their US parents on Saturday. Because the alarm was raised on the weekend, businesses have been slow to respond to the alert, the vendors believe.

The virus has also been detected across five US corporate networks and in India.

Network Associates speculates the "stages" virus was written by the same author as last year's Bubbleboy.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Helen Han

PC World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?