X

New virus disguised as Y2K bug patch

The virus, dubbed W95.Babylonia, is "spreading quickly worldwide" on Windows-based computers, antivirus software company Symantec says.

Stephen Shankland Former Principal Writer
Stephen Shankland worked at CNET from 1998 to 2024 and wrote about processors, digital photography, AI, quantum computing, computer science, materials science, supercomputers, drones, browsers, 3D printing, USB, and new computing technology in general. He has a soft spot in his heart for standards groups and I/O interfaces. His first big scoop was about radioactive cat poop.
Expertise Processors, semiconductors, web browsers, quantum computing, supercomputers, AI, 3D printing, drones, computer science, physics, programming, materials science, USB, UWB, Android, digital photography, science. Credentials
  • Shankland covered the tech industry for more than 25 years and was a science writer for five years before that. He has deep expertise in microprocessors, digital photography, computer hardware and software, internet standards, web technology, and more.
Stephen Shankland
A new virus disguised as a fix to the Year 2000 technology glitch has begun circulating, an antivirus company has said.

The virus, dubbed W95.Babylonia, is "spreading quickly worldwide" on Windows-based computers, said antivirus software company Symantec. The virus spreads using mIRC, Windows software that connects to the Internet relay chat software.

In addition, the virus automatically downloads software via the Internet to the infected computer, raising the possibility that the virus can update itself from a central site, Symantec said.

When a person with an infected computer logs on to mIRC, the virus sends copies of itself to all the people in the chat room. It disguises itself as a Year 2000 bug fix. If a recipient executes the file, the virus infects programs and Windows help files on the computer.

Back to Year 2000 Index Page The "29A" virus group wrote the virus, Symantec said.

Symantec first saw the virus yesterday and has received about 20 submissions from customers so far.

Network Associates has had 25 reports of infection so far, said spokesman Brent Curry. The risk at this point is small because the virus hasn't done any damage yet, but it's a "time bomb" because the virus can update itself remotely.