yhoo32.explr: Messenger worm installs bogus web browser

yhoo32.explr: Messenger worm installs bogus web browser

Yahoo! Messenger users have a new worm to worry about. This worm installs a bogus web browser on the victim’s computer and also plays loud music.

The problem begins when a link is received from a buddy present on the Yahoo! Messenger list. Instant messaging security company FaceTime Communications calls this worm: yhoo32.explr.

If the victim falls for this fake message, the worm installs the so-called “Safety Browser” which loads up pages loaded with adware and viruses.

This fake browser uses the popular Internet Explorer logo to make it look safe for the end users.

The worm also changes the default homepage of the actual Internet Explorer browser and points it to the Safety Browser’s website. In addition, it also forwards itself to the people on the victim’s Yahoo! Messenger list.

More details are available on FaceTime Blog.