We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Microsoft antipiracy program worm appears

Cuebot spreads through AIM

A piece of malware masquerading as Microsoft's antipiracy tool is doing the rounds.

The malware has been classified as a worm and spreads through AOL's Instant Messenger program, said Graham Cluley, senior technology consultant at Sophos, a security vendor.

Sophos is calling it W32.Cuebot-K, a variation in the Cuebot family of malware. The worm has a range of malicious functions. After it's installed, the worm immediately tries to connect to two websites, a sign it may try to download other bad programs on the machine.

Cuebot-K can disable other software, shut off the Windows firewall, download new malicious programs, perform basic DDOS (distributed denial of service) attacks, scan local files and spawn a command prompt, Sophos said.

Worms that spread through IM (instant messaging) programs often appear as messages or links sent from friends, which trick a user into executing the program. Cuebot-K propagates by sending itself as a file named 'wgavn.exe' to more people in the user's 'Buddy List' but without a message, Cluley said.

If installed on a computer, Cuebot-K is registered as a new system device driver service named 'wgavn'. When a list of services running on the computer is summoned, the worm appears as 'Windows Genuine Advantage Validation Notification', Sophos said.

Cuebot-K's registry entry appears as HKLM\System\CurrentControlSet\Services\wgavn\.

The worm's ruse comes as Microsoft's WGA (Windows Genuine Advantage) program is being criticised for functioning like spyware. WGA collects hardware and software data on a user's computer and compares it to a database of licensed operating systems.

If an improper copy is detected, Microsoft warns the user and cuts off some free downloads.


IDG UK Sites

iPad mini 3 vs iPad mini 2 comparison: New iPad mini 3 isn't worth £80 more

IDG UK Sites

Why you shouldn't buy the iPad mini 3: No wonder Apple gave it 10 seconds of stage time

IDG UK Sites

Halloween Photoshop tutorials: 13 masterclasses for horrifying art, designs and type

IDG UK Sites

Should I upgrade from Mavericks to OS X 10.10 Yosemite? What you need to know before updating to...