============================================================
VIRUS ALERT: W32/IRCbot.worm!MS05-039 - High Risk
------------------------------------------------------------
DAT Required: DAT 4560
Learn more about W32/IRCbot.worm!MS05-039 here:
http://us.mcafee.com/root/campaign.asp?cid=16001
FreeScan checks for W32/IRCbot.worm!MS05-0 Scan now:
http://us.mcafee.com/root/campaign.asp?cid=14462
============================================================
What is it?
A fast-spreading Internet Relay Chat (IRC) bot worm affecting systems worldwide, W32/IRCbot.worm!MS05-039 exploits a recently announced Microsoft operating system vulnerability to spread and possibly help a remote hacker control an infected system.
You can be infected simply by going online. Once infected, your system may continually reboot.
What can I do?
Besides making sure you have the latest VirusScan(r) virus definition updates installed, McAfee always recommends installing operating system patches from Microsoft.
Learn more here:
http://us.mcafee.com/root/campaign.asp?cid=16000
How do I know if I've been infected?
The virus copies itself to the Windows System directory (e.g. C:\Windows\System32\ on Windows XP) as WINTBP.EXE.
The file can be run automatically by exploiting the
MS05-039 vulnerability or by a user directly executing the worm.
How do I find out more?
Go to:
http://us.mcafee.com/root/campaign.asp?cid=16001
----------------------------------------------------------
Install the Latest Protection
----------------------------------------------------------
Current VirusScan Subscribers
1. Connect to the Internet.
2. Right-click the red McAfee icon in your system tray.
3. Click Updates.
Note: We recommend setting your service to Automatic Update.