Trojan.Moo Computer Virus
Trojan.Moo was apparently created with the automated tool released by several hackers. The tool, known as the JPEG of Death creation kit, is constantly being updated by its creators and will likely be able to generate viruses soon, said antivirus experts.
A Trojan horse that exploits a recent critical flaw in Microsoft Windows’ handling of JPEG images has been posted to several newsgroups, but it has no way to spread (yet). The posting of the code hidden in a JPEG graphic is the latest in a series of events that security experts have widely predicted: A serious flaw in the widespread Microsoft Windows operating system and software was found; code that showed how to take advantage of the flaw has been published; and a tool to automatically create malicious JPEG images is continually being refined.
Flawed software code used by numerous Microsoft applications to render images mean that a specially constructed image file could hijack a computer or spread a virus. The affected code has a so-called "buffer overrun" flaw. The buffer is a protected part of the computer memory, but flaws can mean that excessive input data can overrun into unprotected parts of a memory. A crafty programmer can use such a flaw to execute unauthorised code on a computer, potentially providing themselves with a point of entry in order to take complete control.
Internet watchers say they’ve spotted infected images that could implant a back door into a Windows computer if they are viewed. One Usenet provider said it has identified two JPEG images that take advantage of a previously identified flaw. Windows users could have their computers infected merely by opening one of those Trojan horse images.
The JPEG flaw affects various versions of at least a dozen Microsoft software applications and operating systems, including Windows XP, Windows Server 2003, Office XP, Office 2003, Internet Explorer 6 Service Pack 1, Project, Visio, Picture It and Digital Image Pro - OS Fix (WindowsXP-KB833987-x86-ENU ~1.3MB) ? Windows XP Service Pack 2, which is still being distributed to many customers’ computers, is not vulnerable to the flaw.
More Torjan.Moo News:
JPEG virus found circulating via IM program - The virus that exploits the recently discovered JPEG vulnerability has been discovered spreading over America Online’s instant messaging program. The instant messages read: "Check out my profile, click GET INFO!" When visited, the Web site automatically sends malicious code embedded in the JPEG image to the computer. Once infected with the code, the computer sends the same message to other contacts in the instant-messenger list. October 2004, USA.
PHISHING scams may provide platform for JPEG virus attack - The first volley in a concerted JPEG virus attack may involve a phishing scam, according to computer security specialists, Computer Associates. October 2004, Australia.
Updated On: 12.07.11