|
Heard of Friday ghosts? The Nyxem-D and
Nyxem-E email worms that come with a timer
to strike every month on a precise day, work the same
way. These worms spread via pornographic messages like
Kama Sutra pics, and they are variants of
the Worm.Win32.VB.bi, first reported by
MicroWorld. Examining the code, our experts have found
that Nyxem works with a timer and is expected strike
on the 3rd of every month.
On the 3rd of February, Nyxem is programmed to overwrite
all infected files. It shrinks files to 20 bytes and
displays an error message when you try to open them.
Though this worm is not sophisticated in nature, its
spreading really fast. On a network, this worm can start
spreading from an unprotected PC and can destroy important
files.
Nyxem proliferates by exploiting the human psychology
to get lured by sexual content. Some of the title lines
of the mails are The Best Video clip Ever, School girl
fantasies gone bad, A Great Video etc, Kama Sutra pics,
Arab sex DSC-00465.jpg and likewise. One of the oldest
forms of virus proliferation, this method is nothing
new. However, its still effective as the virus
has already infected more than half a million PCs around
the world till Monday morning.
In nature, Nyxem is a mass mailing worm that disables
security software on the computer and harvests email
addresses from infected PCs. It comes with an emailing
engine and installs itself in the registry.
Resolution
Timely updates of MicroWorld Products eScan and MailScan
will enable you to keep off threats of this nature.
In case of infections, you can download our free virus
and spyware scanning toolkit MWAV from our
website.
For more information, please visit http://mwti.net/virus_info/virusalertd.asp?vid=798
You can also download the trial versions of the MicroWorld
software from the above mentioned website.
MicroWorld
MicroWorld ( www.mwti.net ) are the developers of the
world's first Real-Time Anti-Virus and Content Security
software eScan for desktops and servers. Its communication
security software, MailScan is the first comprehensive
e-mail scanner for your SMTP/POP3 Mail Server. MicroWorld
Winsock Layer (MWL) is the revolutionary technology
underlying these products, powering them to several
certifications and awards by some of the most prestigious
testing bodies, notable among them being Virus Bulletin,
Checkmark, TUCOWS, Red Hat Ready, and Novell Ready.
Combining their powerful scanner with MWL technology,
MicroWorld solutions provide a Real-Time Proactive security
for your systems.
To learn more, kindly visit the website at http://www.mwti.net/
|