yhoo32.explr: Messenger worm installs bogus web browser
Yahoo! Messenger users have a new worm to worry about. This worm installs a bogus web browser on the victim’s computer and also plays loud music.
The problem begins when a link is received from a buddy present on the Yahoo! Messenger list. Instant messaging security company FaceTime Communications calls this worm: yhoo32.explr.
If the victim falls for this fake message, the worm installs the so-called “Safety Browser” which loads up pages loaded with adware and viruses.
This fake browser uses the popular Internet Explorer logo to make it look safe for the end users.
The worm also changes the default homepage of the actual Internet Explorer browser and points it to the Safety Browser’s website. In addition, it also forwards itself to the people on the victim’s Yahoo! Messenger list.