Wallon virus wrecks Windows Media Player


OSNN Veteran Addict
Political Access
6 Dec 2003
I posted this news so our friends over in the UK who do not know about this virus can be informed

The latest mass mailing virus called Wallon is spreading via HTML email and can destroy the Windows Media Player

A new mass-mailing virus called Wallon, which destroys Windows media player and is activated when a user tries to play MP3 or video files from an infected PC, was discovered in Europe on Tuesday.

Traditionally, mass-mailing viruses such as Netsky and Bagle are spread as attachments. When an unsuspecting user opens the infected attachment, it executes a piece of code that usually attempts to steal the user's address book and often opens a back door to give hackers easy access to the system's resources.

Maikel Albrecht, product manager at Finnish security company F-Secure, said that because of recent virus outbreaks, users are less willing to open email attachments, which is why Wallon's author is counting on users clicking on an email link instead.

"The link in the email points to the actual virus, so if you click the link you download the virus," said Albrecht.

However, once the PC is infected, Wallon remains dormant until the user tries to run a media file such as an MP3 or a video. If by default the system uses Windows Media Player, the virus is activated and attempts to send HTML emails, each with a link to the virus file, to any email addresses in the computer's address book.

"If you try and play media content, the worm will activate and start spreading but the user will not see the media player," said Albrecht.

Wallon requires intervention by the user before it can replicate, so Albrecht expects it will not spread very quickly. But unlike common viruses, Wallon is destructive because it replaces the wmplayer.exe file, which means that users infected by the worm will need to reinstall Media Player.

Stuart Okin, chief security officer at Microsoft UK, said anyone worried about Wallon should install Microsoft's MS04-13 patch, which was released in mid-April and solves the problem.

Okin said that if a user has been infected and can no longer use their Media Player he or she should first ensure the system is no longer infected by the virus and then reinstall Media player either from his or her original Windows CD or from the Microsoft Web site.

Additionally, Okin said users should remain cautious about opening email attachments and they should avoid clicking on links in email messages whenever they can.

"When you receive a link to a Web site that you normally visit, don't click on the link, use your Favourites or type in the address in manually," he said.

:) :) :)

Members online

No members online now.

Latest profile posts

Electronic Punk wrote on Sazar's profile.
Rest in peace my friend, been trying to find you and finally did in the worst way imaginable.
Terrahertz wrote on Electronic Punk's profile.
Yo fellas!
Electronic Punk wrote on Sazar's profile.
Where are you buddy?
Perris Calderon wrote on Electronic Punk's profile.
Hey EP! All good with me, applying for Microsoft MVP right now, should have done this a while ago.

Notifications don't work, I only found your response by coming back to hunt up some threads, if you want, give me your email address so we can keep in touch easier!
Perris Calderon wrote on Electronic Punk's profile.
EP, glad to see you come back and tidy up...did want to ask a one day favor, I want to enhance my resume , was hoping you could make me administrator for a day, if so, take me right off since I won't be here to do anything, and don't know the slightest about the board, but it would be nice putting "served administrator osnn", if can do, THANKS

Been running around Quora lately, luv it there!

Forum statistics

Latest member