File-destroying worm set to activate Friday

**Krell** · February 2nd, 2006, 12:53 AM

Most infected machines believed to be in India, Peru, Turkey and Italy

NEW YORK - If you have computer files you'd rather not lose, now is a good time to make sure your anti-virus software is up to date. A worm set to activate Friday will corrupt documents using the most common file types, including ".doc," ".pdf," and ".zip."

Hundreds of thousands of machines are believed to be infected, mostly in India, Peru, Turkey and Italy, said Mikko Hypponen, chief research officer for Finnish security company F-Secure Corp.

The worm, known as "CME-24," "BlackWorm," "Mywife.E" or a number of other monikers, even tries to disable anti-virus software that is out of date, he said.

Thus, users should make sure their software is turned on and has the latest definitions, generally available for free from the software vendor's Web site. F-Secure also has created a free removal tool.

"If you are infected, and you find out about it today, you still have time to get rid of the virus," Hypponen said.

As worms go, the spread of BlackWorm is relatively low. But worms these days are generally designed to help spammers and hackers carry out attacks, not to destroy files as this one does. So the impact this time may be more severe.

Microsoft Corp. issued an advisory Tuesday warning customers about the worm, which affects most versions of its Windows operating system. (MSNBC.com is a Microsoft - NBC joint venture.)

Users should be safe if they have the latest anti-virus software or if their computers are set with limited privileges, a common setting in larger organizations. They are vulnerable if they, like many small business and home users, leave their computers set with full administrative rights.

And users should check the date on the computer. The worm hits the third of every month, so if the computer's local calendar settings are off, Hypponen said, files may be destroyed sooner or later, even if the computer is never turned on Friday.

http://www.msnbc.msn.com/id/6448213/...4993/?GT1=7841

Rule of thumb, Don't open it, delete it.

If it was important, they can send it again. Don't cripple corporate exchange servers by opening crap that you arent sure of - just delete.

The ~ number of spam messages delivered in the last 30 days = 3.65 Billion

~ volume of spam delievered in the last six months: 118 Terabytes

--Scott Berinato

.

**Auggie2k** · February 2nd, 2006, 07:42 AM

Yeah I heard about this, viruses are now going old school and going back to just pure data corruption.

You ain't eating my porn :hi

**NikM755** · February 2nd, 2006, 08:29 AM

Run task manager and end all process that you can that dont apply to the OS. Run msconfig and delete all startup entries that are unneeded. Run regedit and do a search for the virii, adware etc still running on the comp. clean the entries. run microsoft adware. restart comp. no spyware/adware should run. if its still there you missed something. go back through the steps. run adware. restart. whammo no need to worry about bs files on your computer.

**.:sp00ky:.** · February 2nd, 2006, 10:16 AM

Originally Posted by krell

Rule of thumb, Don't open it, delete it.

If it was important, they can send it again. Don't cripple corporate exchange servers by opening crap that you arent sure of - just delete.

such a simple rule if which people followed most viruses would'nt even be around at all

those "mysisternudepics.exe" must just be too temping for most people though.