Warning

[cfc1]

yhoo32.explr, is threatening Yahoo! Messenger users.

It's the first recorded incidence of malware installing its own web browser on a PC without the user's permission.

The worm, "installs 'Safety Browser' and hijacks the Internet Explorer homepage, leading users to a site that puts spyware on their PCs," says Yahoo.

Because Safety Browser uses the IE icon, users can easily mistake it for Internet Explorer.

"The self-propagating worm spreads the infection to all contacts in Yahoo! Messenger by sending a website link that loads a command file onto the user's PC and installs Safety Browser," the company says.

Yhoo32.explr infects the PC with two elements, adds Yahoo.

The stand-alone 'Safety Browser has no uninstaller, "and disguises itself with an Internet Explorer logo in some instances. The application also hijacks the personal homepage in Internet Explorer and points users to Safety Browser's homepage (demoplanet.tv). The hijack also plays looped music that cannot be stopped when the user starts up the PC or Safety Browser."

The second element is the self-propagating worm which installs an .exe file that spreads the infection through Yahoo Messenger to everyone on the Contacts List.

EdIT:

This is something i have heard about.. but i have also heard the it could be a hoax (which in itself is a virus of sorts) the only company that seems to know anything aabout it is an anti spyware group called facetime which is an anti-spyware company.. so could just be a ploy to get people to buy it.

Anyway.. if you use Yahoo Messenger.. be carefull just incase there is any truth that this worm actually does exist.. info here.

http://p2pnet.net/story/8844 and http://biz.yahoo.com/prnews/060519/sff034.html?.v=45