The Wall Street Journal, May 14, 2004
Finjan In The News
| New Worm Targets
Windows Media Player
|A new worm that infects computers when e-mail recipients click on a fake Web site appears to be spreading, some computer security companies said.
The "Wallon" worm spreads in an e-mail message that appears to be a news site from Yahoo Inc., according to Finjan Software Inc., which on Thursday elevated the threat to "medium risk." A link in the e-mail takes users to Web sites not associated with Yahoo, which downloads the worm to the victim's computer.
Other computer security companies, including Symantec Corp. and Network Associates Inc., hadn't raised Wallon's risk rating. A spokeswoman for Finjan said the company has seen an increase in the number of e-mails carrying the worm.
The Wallon worm appears to lay dormant in infected Windows computers until a user attempts to play an audio or video file using the Windows Media Player, Once a user attempts to use the media player, the worm sends itself to the victim's e-mail address list, with the bogus Web link.
Finjan, based in the San Jose, Calif., said users should install the latest patches from Microsoft Corp. and update their antivirus software regularly.