JS/Coolnow.A@mm

Name: JS/Coolnow.A@mm
Aliases: Coolnow, JS.Menger.Worm, JS.Coolnow, JS/Exploit-Messenger, JS_MENGER.GEN
Type: Worm
Discovery Date: February 13, 2002

Description:

JS/Coolnow.A@mm is a JavaScript worm that targets a known vulnerability in Microsoft Messenger. The worm is able to spread via a message that contains the url of an infected web page; the malicious code is executed when the user visits this site.

The worm then accesses the infected system's MSN contact list and sends a message containing a link to an infected web site to all recipients.

For further information, and to install the Microsoft Security Update, go to www.microsoft.com/windows/ie/downloads/critical/q316059/default.asp.


Detection:

Command Antivirus version 4.59.0 or higher with definition files dated 02/14/2002 will detect this virus.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .