One More Christmas Infection Exploiting Windows Vulnerabilities

Written by IT News on 5:48 PM

WORM_DLOADER.TBW spotted in the wild
By: Bogdan Popa, Security and Search Engines Editor | softpedia.com

In case you thought you're safe this Christmas because you have applied the latest definitions for your security software, I'm sorry to disappoint you, but you're
not safe at all. And a recently-spotted worm comes to support this statement. WORM_DLOADER.TBW is a Windows infection discovered by security company Trend Micro, which affects most versions of the Microsoft operating system including 98, ME, NT, 2000, XP and Server 2003. What's worse is that the worm has a high distribution potential which underlines the fact that it can easily reach your computer, if you're one of the vulnerable guys.

In this case, 'vulnerable' doesn't refer to outdated antivirus or inexistent firewall. This time, it's all about a Windows vulnerability that may be exploited by the worm in order to get inside the system.

"This worm is a component of other malicious programs. It may be used by other malwares to perform its malicious routines. However, it requires other components in order to run properly. When executed together with other malware files, it takes advantage of the Server Service vulnerability to propagate across networks", Trend Micro wrote in the security notification published a few days ago.

The worm may be dropped on your system once you visit a malicious website equipped with the infection, or it can be included in other malware packages, the security vendor added.

The Windows vulnerability is pretty serious and can really represent a danger for your computer, according to an advisory released by Microsoft. "An attacker who successfully exploited the vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. We recommend that customers apply the update immediately", the Redmond-based firm wrote.