Once this process is completed, Bizex starts to propagate using ICQ. The worm will therefore be uploaded to the computer memory each time the operating system is started.

It creates a folder named SYSMON in the Windows system directory, copies itself to this folder under the name SYSMON.EXE and registers this file in the system registry auto-run key. Once this has been done, Bizex begins the process of infecting the victim computer. The result of this is that a special file is downloaded to the computer, without the user noticing anything this file downloads the file which contains Bizex and launches it on the victim computer. At the same time, the malicious program attacks the computer on two fronts: firstly, by using a breach in Internet Explorer, and secondly, by using a breach in Windows. Invitations to visit this site are being circulated by ICQ.Īs camouflage, when the web-site is viewed, the user is shown the Joe Cartoon site Joe Cartoon is the creator of a popular American cartoon series. A preliminary estimate is that approximately 50,000 are infected.Ī computer becomes infected if the user visits a hacker web-site. At the moment, messages about infection are coming in from almost all corners of the globe. Kaspersky Lab has detected Bizex, a new Internet worm which caused the first global epidemic among users of ICQ, the Internet instant messaging system. First global epidemic of an ICQ worm detected

Web icq online