“A new mass-mailing virus called Wallon, which wipes out Windows Media Player and is activated when a user tries to play MP3 or video files from an infected PC, was discovered in Europe on Tuesday,” Munir Kotadia reports for CNET News. “Maikel Albrecht, a product manager at Finnish security company F-Secure, said that because of recent virus outbreaks, users are less willing to open e-mail attachments, which is why Wallon’s author is counting on users clicking on an e-mail link instead. ‘The link in the e-mail points to the actual virus, so if you click the link, you download the virus,’ Albrecht said.”
Kotadia reports, “…Once the PC is infected, Wallon remains dormant until the user tries to run a media file such as an MP3 or a video. If the system uses Windows Media Player by default, the virus is activated and attempts to send HTML e-mails, each with a link to the virus file, to the addresses in the computer’s e-mail address book. ‘If you try and play media content, the worm will activate and start spreading, but the user will not see the media player,’ Albrecht said… unlike common viruses, Wallon is destructive because it replaces the wmplayer.exe file, which means that users infected by the worm will need to reinstall Media Player.”
Full article here.
MacDailyNews Note: The Wallon virus is an executable (.exe) file that does not affect Macintosh computers with Windows Media Player installed. It wouldn’t really matter if it did affect Macs, because Windows Media Player for Mac would work about as well as it does now even if it were wiped out by Wallon