Worm takes centre stages

The South American-originated virus, "IRC/Stages.worm" (with aliases LIFE_STAGES.TXT.SHS and VBS_Stages.A), has infected three Australian organisations, Andy Liou, marketing manager with Trend Micro Australia, said today.

Trend Micro received "confirmed reports" from business customers that two of the companies were motoring and government organisations in NSW. One is a nationwide subsidiary of a US manufacturing company, Liou added.

However, Dean Stockwell, professional services director of Network Associates, claimed that 20 Australian businesses from the telecommunications, manufacturing and finance sectors have been hit.

According to a Network Associates alert issued today, the virus build is similar to that of the Love Bug. It modifies and re-releases itself by attaching itself to email messages.

It arrives in the following format: Subject: Funny, Body: The male and female stages of life.

The worm was designed to spread quickly via email spamming, according to the antivirus vendors. It takes advantage of installations of Pirch, Outlook and mIRC, also spreading to available mapped drives.

Moreover, it deletes the registry editor feature on Microsoft Windows, deleting system functionalities such as keyboard keys, according to Liou. "Even if you delete one or two files, there is no quick and easy way of erasing it," he said.

Because the virus appears with joke titles in attachments, this will make it harder for users to detect, Liou said. People are falling for the virus due to its "social engineering", he believes.

"This virus will grind email systems to a halt," Stockwell said. "Nobody is safe from this virus."

Two Sydney organisations' email systems have "completely crashed", with both experiencing "different" levels of exposure, according to Stockwell. He declined to name the companies.

However, Stockwell insisted the bug is "not a huge risk" to business operations, provided companies immediately update their scan engine.

Network Associates and Trend Micro received the alert from their US parents on Saturday. Because the alarm was raised on the weekend, businesses have been slow to respond to the alert, the vendors believe.

The virus has also been detected across five US corporate networks and in India.

Network Associates speculates the "stages" virus was written by the same author as last year's Bubbleboy.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Helen Han

PC World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?