Jump to content

About BlackWorm

Rate this topic


Guest Stuge

Recommended Posts

taken from here:BlackWorm

About BlackWorm

Over the last week, "Blackworm" infected about 300,000 systems based on analysis of logs from the counter web site used by the worm to track itself. This worm is different and more serious than other worms for a number of reasons. In particular, it will overwrite a user's files on February 3rd.

At this point, the worm will be detected by up to date anti virus signatures. In order to protect yourself from data loss on February 3rd, you should use current (Jan 23rd or later) anti virus signatures. Note, however, that the malware attempts to disable/remove any anti-virus software on the system (and does this every hour while the system is up), so if the machine was infected before signatures were deployed, obviously, that anti-virus software can't be expected to clean up the infection for you.

The following file types will be overwritten by the virus: DOC, XLS, MDE, MDB, PPT, PPS, RAR, PDF, PSD, DMP, ZIP. The files are overwritten with an error message( 'DATA Error [47 0F 94 93 F4 K5]').

We will try to post more detailed cleanup instructions later. However, it is likely that you will have to rebuild the system from scratch. Obtaining good backups is critical as a first step.

In addition to Kama Sutra, the worm has been named Blackworm, Blackmal, MyWife and Nyxem.

you can also see here :http://www.eweek.com/article2/0,1895,1915070,00.asp

http://www.internetnews.com/security/article.php/3581991

So to prevent you to from anydata loss from your computer don`t open any unknown e-mail that you recieve...

Link to comment
Share on other sites

I know it's a little extreme, but maybe someone should instigate a worldwide punishment for human parasites who have too much free time on their hands and write computer viruses.

It should be painful. Like dragging a 200kg rock chained to their neck in each country of the world in which a computer was infected by a virus.

Then we can have a cable or Web channel on which we can follow their progress.

Appropriate rehabilitation will follow punishment.

Or maybe something even more painful for them: lock them in a room without computers.

Link to comment
Share on other sites

Dunno how dangerous this worm/virus has been in the past, but from what I can gather, it didn't do much compared to the other big worms that hit in the past, or compared to the traditional Virii such as the Michangelo (which got bigger press and did bigger damage IIRC).

I wonder if this all insecure bit and media hype is helping to make computers (by that I mean Windows systems in large) more secure?

Of course, with better security policies (such as not disabling normal USER to a point where to do anything remotely productive, he has to log in as admin), this could be moot. However, one should be aware that the Windows as a whole was designed for single user in mind.

Link to comment
Share on other sites

one amazing thing that this virus is only activated on 3rd of every month .So if any computer is infected before the 3rd then virus will start deleting the files from the computer on 3rd..Amazing ...

Next D-DAY OF this virus is March 3 2006 ..

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
×
×
  • Create New...