Sophos, a security vendor has found a new worm variant called W32.Cuebot-K that that pretends to be a Microsoft anti-piracy program. It spreads through the AOL’s Instant Messenger program. The worm has a range of malicious functions. After it’s installed, the worm immediately tries to connect to two Web sites, a sign it may try to download other bad programs on the machine. Pretty scary. Update your virus definitions today !

If installed on a computer, Cuebot-K is registered as a new system device driver service named “wgavn.” When a list of services running on the computer is summoned, the worm appears as “Windows Genuine Advantage Validation Notification” Sophos said.

W32.Cuebot-K Pretends to be Microsoft Anti-Piracy Program source