Sophos

Sophos blogs

JS/Coolnow-A

Aliases
  • JS.Menger.worm
Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

JS/Coolnow-A is an MSN Messenger worm which exploits a vulnerability in Microsoft Internet Explorer.

The body of the worm exists on a web page. When the page is viewed by a vulnerable user the worm will send a message to all the user's MSN Messenger contacts. The message will ask the recipient to visit the affected web page.

The text of the message will vary according to the affected web page but may be similar to "Go to: http://<address of affected website>".

The worm makes no modifications to a user's system.

Microsoft has issued a security patch which secures against the vulnerability. It is available at Microsoft Security Bulletin MS02-005

The JS/Coolnow-A worm is sometimes mistakenly referred to as the "Warhol" worm by the media and commentators outside of the anti-virus industry.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer