Protection for iPod worm

McAfee today announced it has released a new version of McAfee Stinger, which targets two Windows-based threats that are still being identified on video iPod and MP3 devices. McAfee Stinger is a free standalone utility tool that can detect and remove specific viruses, including the W32/RJump.worm, also named RJump.worm and the W32/QQPass.worm, also named QQPass.worm. Protection for both threats has been available in McAfee products since September 25, 2006 and August 15, 2006, respectively, but Avert Labs has made the tool available for consumers who may not already have adequate anti-virus protection. The W32/RJump.worm, which was discovered June 20, 2006, recently reappeared on video iPod devices released by Apple late September, as noted earlier today.

W32/RJump.worm uses the Python scripting language and is converted into a Windows portable executable file. It attempts to spread by copying itself to mapped and removable storage drives and also opens a backdoor on an infected system. The W32/QQPass.worm, which was first discovered February 5, 2003 on MP3 players released in Japan, has again surfaced this week on MP3 devices released in August. W32/QQPass.worm is a generic worm that steals password information from QQ, a popular instant messaging application in China. Both worms may spread through spam, instant messaging, removable media and other means.

"While the QQPass.worm and the RJump.worm have both been around for a while, they are still making their way into the hands of consumers through MP3 players and video iPod devices that were initially infected with the virus," said Joe Telafici, director of operations, McAfee Avert Labs. "Today's multi-function devices, like MP3 players, cell phones and digital cameras, with their much larger storage systems, and consumers' tendency to plug them into multiple computers, can be a vector for slow-spreading threats like QQPass and RJump. With McAfee Stinger, consumers can scan for and remove these threats -- safely eliminating them from their systems and devices."

McAfee Stinger is a standalone utility used to detect and remove specific viruses. The company emphasize that the free tool is not a substitute for full anti-virus protection, but rather designed to assist administrators and users when dealing with an infected system. Stinger utilizes next-generation scan engine technology, including process scanning, digitally signed DAT files and scan performance optimizations.

by MacNN Staff