Feb 3rd Virus Warning!!!

[ycr007]

There were a couple of Virus warnings released by Major Anti Virus manufacturers regarding the outbreak of Two (or are they the same??) worms.

One is the Black Worm and other is the 'Kama Sutra' virus.......

It has been observed that the Black Worm also known as W32.Vb.i or W32.Nayem.E has been actively spreading in India since last two weeks now. It’s a mass-mailing worm that also spread using remote shares. After a long gap there has been an outbreak kind of situation as this worm was successful in spreading all over the globe within few hours when it first appeared over the Internet. The reason why the worm was so successful in spreading all over is just because it spreads by creating a mime encoded compressed executable with a different extension (.HQX, .BHX), which didn’t had any kind of header to classify the file. As a result the mail gateway scanners were not able to decode the attachment and scan the infected files. This is why the worm got skipped even though the mail severs have updated anti-virus scan engines. Many of the leading AntiVirus software’s had to do some changes to their scan engine to make the scanners decode the file and scan for the infected attachment

This worm has a dangerous payload, it will delete all the documents, worksheets, presentations, database files and compressed backup files from the system on every 3rd day of the month. This is very serious payload considering that the worm has spread all over India and the first payload day of 3rd February is arriving very soon. We recommend all our users to have their AntiVirus updated, up and running

Source

Beware of the 'Kama Sutra' Virus:

Microsoft in an e-mail Tuesday warned users to update their antivirus protections against the Kama Sutra worm, the mass-mailing virus slated to begin corrupting files later this week.

In its advisory for the Kama Sutra worm, otherwise known as win32/Mywife.E@mm and Nyxem.E, Microsoft warns users to be wary of opening unknown attachments.

The worm, which infects a user's computer once an attachment is opened, may also spread over writeable network shares if there are blank administrator passwords. Users hit with the worm may find a number of their files permanently corrupted on the third day of every month, beginning this Friday.

Like other worms, the Kama Sutra virus attempts to disable security software that is loaded on users systems, Microsoft warns.

Microsoft is advising users to update their antivirus software, as well as remain cautious when opening unknown attachments and use strong password protection.

Security experts estimate the worm has infected at least 500,000 PCs, often using pornography as its enticement.

Source

[piyush gupta]

Thanx for there warnings I'll update my Anti Virus Def.

[sudipto]

thanks for the info.I will keep in mind

[cryptid]

I am soo happy that i switched over to linux no janjat atall

[atool]

thanks for sharing info

[hermit]

d/l scan and remove tool from



http://anonym.to/?http://securityres...r/FixBmalE.exe

[godsownman]

Yes I read about this in the morning, TOI reported it to me .

I wonder how much damage will take place it people are not vigilent.

@ Hermit thanks for the link.

[LegendKiller]

saw it in newspaper today,thanks for info

[club_pranay]

thank for the links! i'll be dead if this thing gets into my machine!!

[rajas700]

W32.Beagle.DL@mm is a mass-mailing worm that uses its own SMTP engine to spread to peer-to-peer and file sharing networks. It opens a back door on the compromised computer and attempts to lower security settings. The worm may also download and execute remote files.


MORE INFR:

http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.dl@mm.html

[LegendKiller]

dude add it to the already posted topic feb3..its been posted already.
your link is useful and will serve more purpose there

[shwetanshu]

http://www.thinkdigit.com/forum/viewtopic.php?t=37070

[rajas700]

Originally Posted by shwetanshu

http://www.thinkdigit.com/forum/viewtopic.php?t=37070

I know.... look up for further information.......

[sude]

ok fine.
i wud have seen this post once..

-SUDE

[Choto Cheeta]

hmm... so far so good... i am tension free!! trusting my KAV which never took me down... 20 system in our cafe!! 18 of them on KAV... 2 runs Symantec CE 10... those which was running Server 2k3 with Symantec CE cought up that W32.Nayem.E... result?? no AVS website was opening (any browser) stoped network scanner / printer access gave pretty much trouble with CafeZee... had switch to secondary OS winXP to install KAV (our version of kav dont get install on server) & scaned it... what i get?? see this report...



up2date Symantec CE 10 was failed to stop it / even detect it.... but all system running KAV PerPro 5.0 stoped it even getting in to our system... so i am very happy with its performance...

______________________________________________

Thanks to ImageShack for Free Image Hosting

[navjotjsingh]

Even I was attacked by this virus! Thanks to Yahoo! (uses Norton AV) and McAfee 2006 on my system that the virus has not been able to penetrate in my PC but has given be a bigger problem to worry about!

It got the contact of a Yahoo! grop of which I am a moderator - its for our college! Now it post obscene messages with virus attachement everyday and now I have to manally moderate all the messages and this is giving me a headache! I have not found a solution still for it!

[sidewinder]

I have also been attacked by this worm in my yahoo account..but Yahoo caught it before i can download it....
When I used pop to download mails my AVG pro caught it... I am tension free now...It cant harm me

[hermit]

BitDefender definations r good ,as i first cought virus scanning through this where as Mcafee 8i detected it after 3 days later(i update every day )

but these virus re writes regestry on 3 ed of every month so its better to run san from 1 st of every month

[thecyclone2k]

I am not such a fool that I would click on attchments which have attractive words.

[praka123]

Another Reason for U to switch to GNU/Linux or BSD OS's.