Advertisement
To print: Select File and then Print from your browser's menu
-------------------------------------------------------------- This story was printed from ZDNet Australia. --------------------------------------------------------------
Aussie experts downplay Kazaa worm threat

By James Pearce, ZDNet Australia
May 21, 2002
URL: http://www.zdnet.com.au/news/security/soa/Aussie-experts-downplay-Kazaa-worm-threat/0,130061744,120265377,00.htm


Australia has seen some infections of Benjamin, the new Kazaa worm, but experts have downplayed the threat.

-We're not rating it as high risk," David Banes, region manager of Symantec security response told ZDNet Australia. -It doesn't replicate itself, you have to request the file from someone's PC. It's a manual replication.

The new worm, labelled W32.Benjamin.Worm on the Symantec Web site, is the first worm to use the Kazaa file-swapping service as a vector. It opens a network-accessible folder on the infected user's computer and fills it with copies of itself under different names, such as Age of Empires-Games-full-downloader, American Pie 2 -divx-full-downloader, and Metallica - Blackened. It also changes its size by adding random text to the end of the file.

Symantec reports receiving 19 submissions of the worm over the last couple of days, from just a few sites. -It's not a lot, but it's enough that we're doing a more detailed analysis," Banes said.

The worm is considered a low threat because of the manual replication method, and ease of containment and eradication.

Copyright © 2009 CBS Interactive, a CBS Company. All Rights Reserved.
ZDNET is a registered service mark of CBS Interactive. ZDNET Logo is a service mark of CBS Interactive.