McAfee Stinger

Features: McAfee Inc. has announced that it has released a new version
of McAfee Stinger, which targets two Windows-based threats that are still being
identified on video iPod and MP3 devices.



McAfee Stinger is a free standalone utility tool that can detect and remove
specific viruses, including the W32/RJump.worm, also named RJump.worm and the
W32/QQPass.worm, also named QQPass.worm.



Protection for both threats has been available in McAfee products since
September 25, 2006 and August 15, 2006, respectively, but Avert Labs has made
the tool available on the web.



The W32/RJump.worm, which was discovered June 20, 2006, recently reappeared on
video iPod devices released by Apple late September. W32/RJump.worm uses the
Python scripting language and is converted into a Windows portable executable
file. It attempts to spread by copying itself to mapped and removable storage
drives, and also opens a backdoor on an infected system. The W32/QQPass.worm,
which was first discovered February 5, 2003 on MP3 players released in Japan,
has again surfaced this week on MP3 devices released in August. W32/QQPass.worm
is a generic worm that steals password information from QQ, a popular Instant
Messaging application in China. Both worms may spread through spam, instant
messaging, removable media and other means.



“While the QQPass.worm and the RJump.worm have both been around for a while,
they are still making their way into the hands of consumers through MP3 players
and video iPod devices that were initially infected with the virus,” said Joe
Telafici, director of operations, McAfee Avert Labs.



“Today's multi-function devices, like MP3 players, cell phones and digital
cameras, with their much larger storage systems, and consumers' tendency to
plug them into multiple computers, can be a vector for slow-spreading threats
like QQPass and RJump. With McAfee Stinger, consumers can scan for and remove
these threats-safely eliminating them from their systems and devices,” he
added.