Msn Messenger Clients...new Worm!

FYI…from the Internet Storm Center:

http://isc.sans.org/diary.html?date=2003-12-30
"…A new worm has been identified spreading through MSN Messenger clients. The worm propagates by sending a message to everyone in the contact list every 5 minutes. The message has a link to download itself. No destructive activity has been observed with the worm, however analysis is still underway. Widespread penetration of this virus could render a denial of service against MSN Messenger users. Further information…at the Panda Software web site under "Jitux.A":

- http://www.pandasoftware.com/virus_info/threats.aspx …"

-

FYI…NAV Liveupdate 12.31.2003
- http://www.sarc.com/
LiveUpdate:
Virus Definitions released December 31
Norton AntiVirus Corp. Edition:
Defs Version: 51231q
Sequence Number: 27033
Extended Version: 12/31/2003 rev. 17
- http://www.sarc.com/avcenter/defs.added.html
–> (Covers the new problematic Jitux.Worm attacking the MSN Messenger client)
- http://www.sarc.com/avcenter/venc/dyn/6386.html

- Other AV vendors soon to follow suit, if not already- chk definitions date on your AV…

Updated info on jitux.worm:

- http://www.sarc.com/avcenter/venc/data/w32.jitux.worm.html

(Info) Last Updated on: January 02, 2004 04:57:05 PM

I have jit.dll in windows\system folder (Win95). Does that mean I have the worm please?

In a word - no.

An excellent resource for checking the use of -dll- files is here:
- http://support.microsoft.com/default.aspx?…ion/dllinfo.asp

…In the search/lookup of the jit.dll file, it is a legitimate file used by Microsoft® Just-in-Time Compiler for Java. Although, I am currently using the Sun Java VM component for the browser, the MS Java component lies dormant on my system in exactly the same place as yours - no "virus" here. You can double check by finding the file, right-click on it, and view its "Properties > Version".