Worm poses As Microsoft Windows Genuine Advantage

Security vendors, Sophos, have warned of a worm that disguises itself as Microsoft’s anti-piracy program.
The Cuebot-K worm poses as the genuine Microsoft Windows Genuine Advantage (WGA) program which was recently the subject of controversy, following allegations that it has been spying on Windows users by collecting hardware and software data from PCs.
The Cuebot-K worm spreads via instant messenger, registering itself as a new system driver service called ‘wgavn’, with a display name of ‘Windows Genuine Advantage Validation Notification’, and automatically runs during system start-up.

Full Story: http://www.mumbaimirror.com/nmirror/mmpaper.asp?sectid=16&articleid=732006224958406732006224957312