Content
TO HELP IPOD AND MP3 USERS DETECT AND REMOVE WINDOWS WORMS McAfee’s Malware Removal Tool Targets Customers Affected by W32/QQPass.worm and W32/RJump.worm
McAfee, Inc. (NYSE: MFE) today announced it has released a new version of McAfeeâ Stinger, which targets two Windows-based threats that are still being identified on video iPod and MP3 devices. McAfee Stinger is a free stand alone utility tool that can detect and remove specific viruses, including the W32/RJump.worm, also named RJump.worm and the W32/QQPass.worm, also named QQPass.worm. Protection for both threats has been available in McAfee products since September 25, 2006 and August 15, 2006, respectively, but Avertâ Labs has made the tool available at http://vil.nai.com/vil/stinger/default.aspx for consumers who may not already have adequate anti-virus protection.
The W32/RJump.worm, which was discovered June 20, 2006, recently reappeared on video iPod devices released by Apple late September. W32/RJump.worm uses the Python scripting language and is converted into a Windows portable executable file. It attempts to spread by copying itself to mapped and removable storage drives, and also opens a backdoor on an infected system. The W32/QQPass.worm, which was first discovered February 5, 2003 on MP3 players released in Japan, has again surfaced this week on MP3 devices released in August. W32/QQPass.worm is a generic worm that steals password information from QQ, a popular Instant Messaging application in China. Both worms may spread through spam, instant messaging, removable media and other means.
“While the QQPass.worm and the RJump.worm have both been around for a while, they are still making their way into the hands of consumers through MP3 players and video iPod devices that were initially infected with the virus,” said Mr. Henry Yuen, Regional Manager, Taiwan and Hong Kong, McAfee. “Today’s multi-function devices, like MP3 players, cell phones and digital cameras, with their much larger storage systems, and consumers’ tendency to plug them into multiple computers, can be a vector for slow-spreading threats like QQPass and RJump. With McAfee Stinger, consumers can scan for and remove these threats—safely eliminating them from their systems and devices.”
McAfee Stinger is a stand-alone utility used to detect and remove specific viruses. It is not a substitute for full anti-virus protection, but rather a tool to assist administrators and users when dealing with an infected system. Stinger utilizes next generation scan engine technology, including process scanning, digitally signed DAT files and scan performance optimizations.
System Protection and Cure
More information on W32/QQPass.worm and W32/RJump.worm and the cure for these worms can be found online at http://vil.nai.com/vil/content/v_110926.htm and http://vil.nai.com/vil/content/v_139985.htm. McAfee customers have been proactively protected since the 4859 and 4830 DAT (data definition) files. For customers running at least this DAT file, no action is required. McAfee Avert Labs recommends all customers insure they are running the latest DAT release and schedule full system scans to insure an infection-free environment.
McAfee Avert Labs maintains one of the top-ranked security threat and research organizations in the world, employing researchers in sixteen countries around the globe. The Labs combine world-class malicious code and anti-virus research with intrusion prevention and vulnerability research expertise.
About McAfee, Inc.
McAfee, Inc., headquartered in Santa Clara, California, and the global leader in Intrusion Prevention and Security Risk Management, delivers proactive and proven solutions and services that secure systems and networks around the world. With its unmatched security expertise and commitment to innovation, McAfee empowers home users, businesses, the public sector, and service providers with the ability to block attacks, prevent disruptions, and continuously track and improve their security. http://www.mcafee.com
###
NOTE: McAfee, Preventsys, SiteAdvisor, Citadel, ePolicy Orchestrator, ePO, and Power of M are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. © 2006 McAfee, Inc. All rights reserved.
