Information and Removal for Benjamin Kazaa Worm
Posted on 20.05.2002
The KaZaA network is one of the most popular file exchange networks using Peer-to-Peer (P2P) technology. Millions of people from all around the world are active users of the network that allows them to quickly dig up files they seek (such as MP3 files) and give other users access to data contained on their own computers.

On an infected computer "Benjamin" creates a directory accessible to other users of the KaZaA network and regularly copies itself into this directory under a multitude of different names, the amount of which counts several thousand. When a network user conducts a search for a file under a name corresponding with one the worm's pseudonyms the unsuspecting user is given the chance to download it from the infected computer. Thus, this is how Benjamin spreads itself through the KaZaA network. In addition to eating up free disk space Benjamin takes additional actions: under the name of the infected computer's owner it opens an anonymous web site from which it displays advertising banners. This way Benjamin's creator profits by the resulting increase in advertising displays.



Sharing Files Networks Under Attack - BitDefender response to Worm.Kazaa.Benjamin:

"After Gnutella being attacked almost a year ago, it was to be expected that other fast growing P2P networks will be the next victims of virus writers" said Sorin Dudea, Virus Researcher at BitDefender, SOFTWIN. "The first Kazaa virus uses an impressive list of over 1000 titles including recent movies, MP3 songs or extremely valuable software kits, to trick users into downloading its body. Even if the virus doesn’t specify this, it might be an attempt to stop software and DivX movies distribution through exchange file networks" Sorin concluded.

Full press release: http://www.net-security.org/press.php?id=790

BitDefender Response Team strived to quickly develop a disinfection tool, which we added to our download section.

Kazaa Worm Fix - http://www.net-security.org/software.php?id=115



According to the BitDefender Real Time Virus Tracking (RTVR), in the past 24 hours (current time is 6 pm CET) there were 2948 files infected with Benjamin worm.

RTVR - http://www.net-security.org/v/bd/RTVR/rtvr_24hours.php



Scan your computer for viruses from Help Net Security with BitDefender Online Scan located at: http://www.net-security.org/v/bd/scan






Spotlight

The evolution of backup and disaster recovery

Posted on 25 July 2014.  |  Amanda Strassle, IT Senior Director of Data Center Service Delivery at Seagate Technology, talks about enterprise backup issues, illustrates how the cloud shaping an IT department's approach to backup and disaster recovery, and more.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Mon, Jul 28th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //