October 18, 2006

McAfee Stinger for MP3 Players

McAfee has announced the release of a new version of McAfee Stinger, which targets two Windows-based threats that are still being identified on the video iPod and MP3 devices.

McAfee Stinger is a free, stand alone utility tool that can detect and remove specific viruses, including the W32/RJump.worm, also named the RJump.worm; and the W32/QQPass.worm aka the QQPass.worm. Protection for both threats has been available in McAfee products since September 25, 2006 and August 15, 2006, respectively.

The W32/RJump.worm, which was discovered on June 20, 2006, reappeared on video iPod devices released by Apple late September. This uses the Python scripting language and is converted into a Windows portable executable file. It attempts to spread by copying itself to mapped and removable storage drives, and also opens a backdoor on an infected system.

The W32/QQPass.worm, which was first discovered on February 5, 2003 on MP3 players released in Japan, has surfaced again this week on MP3 devices released in August. This one is a generic worm that steals password information from QQ, a popular Instant Messaging application in China.

Both worms may spread through spam, instant messaging, removable media, and other means.

Kartik Shahani, director - sales India, McAfee, said, "Devices like MP3 players, cell phones, and digital cameras, with their much larger storage systems, and consumers' tendency to plug them into multiple computers, can be a vector for slow-spreading threats. When you try downloading or transferring a file from the Internet on to your device, it is necessary that you make sure that the file does not carry any Trojan or worm of any kind."

"McAfee Stinger helps you do exactly that. Stinger works on the vulnerability and not on the signature, so any Trojan is detected and blocked. It gives caution messages through pop-ups when a Trojan is detected," Shahani said.

A product of McAfee Avert Labs, McAfee Stinger is a stand-alone utility, and not a substitute for full anti-virus protection. It can be described rather as a tool to assist administrators and users when dealing with infected systems. Stinger utilizes next generation scan engine technology; including process scanning, digitally signed DAT files, and scanning of performance optimizations.

McAfee Stinger is available for free download on the company Web site.

No comments: