McAfee has added anti-virus detection against what seems to be a targeted P2P spreading virus. W32/Vora.worm!p2p symptoms include re-appearing of a small gui message box on the screen with caption of the messagebox is: Doomsday Has Come..., and message : YOU ARE iNFECTED BY RAVO_5002.
The worm tries to spread over peer to peer shared folders, the actual execution of the malicious binary is a manual step, there's no exploit associated with it.
It tries to spread using:
BearShare
eMule
Morpheus
Shareaza
Kazaa
It might also try to spread using irc networks, trying to spread using dcc send.
The fact that it carries no malicious payload gives away an attempt to see how efficient is the P2P medium in spreading a virus. I'm afraid that the more popular P2P networks get, the more malware will come trough this new attack vector.
