|
The mass-mailing worm that was widely expected to strike computers across the world today, is said to be actually programmed to strike on the third of every month from February 2006. However, till this evening no actual cases of infection have so far been reported. According to the CERT, the mass mailing worm called Nyxem with aliases such as Kama Sutra, Blackmal, MyWife, Grew and its variants are spreading very fast infecting large number of computers running Microsoft Windows. Win32/Mywife.e@mm is a mass-mailing network worm that targets certain software. The worm spreads through e-mail attachments and shared network drives. This variant does not exploit any security vulnerability, but is dependent on the user opening an infected file attachment. The virus has been accorded a medium rating in terms of transmission and moderate rating for recovery. However, it does not have a high damage rating. The worm is activated when an infected mail is opened. After the strike, it deletes the Microsoft and Adobe files. It also sends itself to the addresses in the mail book of the infected computer.
The file formats that are most at risk of being infected are DOC, XLS, MDB, MDE, PPT, PPS, ZIP, RAR, PDF, PSD and DMP. While the well- known e-mail service providers have an updated anti-virus software to take care of the worm, the internal e-mail systems of organisations that did not have effective anti-virus systems, were at risk.
CERT has advised computer users to update anti-virus software regularly, block emails with the subjects and attachments mentioned above at the email gateway level, exercise caution while opening email attachments, block unknown file types at the email gateway, backup all important data files and apply appropriate security updates at OS and application level. In a press release, Gulshan Rai, director, Indian Computer Emergency Response Team (CERT In), has advised, "To detect and protect your data from the Win32/Mywife.e@mm, also known as Black Worm or Kama Sutra worm, Indian Computer Emergency Response Team (CERT In) advises all users to visit the Protect Your PC Web site (www.protectyourpc.com). CERT In has also advised all computer users to use caution with unknown file attachments to follow the guidelines of allowing a firewall, getting software updates, and installing anti-virus software at . Additionally, Microsoft also provides tools for detection of and protection from the worm and its variants at its Windows_OneCare_LiveBeta
also see : www.cert-in.org.in/virus/nyxem_e-worm.htm
|
