Sophos

JS/Coolnow-A

Aliases
  • JS.Menger.worm
Category
Type
What to do

Summary

 
Included in our products from April 2002 (3.56)
Detected by All Sophos products

Action

More Information

JS/Coolnow-A is an MSN Messenger worm which exploits a vulnerability in Microsoft Internet Explorer.

The body of the worm exists on a web page. When the page is viewed by a vulnerable user the worm will send a message to all the user's MSN Messenger contacts. The message will ask the recipient to visit the affected web page.

The text of the message will vary according to the affected web page but may be similar to "Go to: http://<address of affected website>".

The worm makes no modifications to a user's system.

Microsoft has issued a security patch which secures against the vulnerability. It is available at Microsoft Security Bulletin MS02-005

The JS/Coolnow-A worm is sometimes mistakenly referred to as the "Warhol" worm by the media and commentators outside of the anti-virus industry.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer