(I am very sorry for some of the words used here in this post.........)
_______________________________________________
It promises naughty pictures and porn but takes away more than it delivers. It's a computer worm that's been programmed to strike, and strike hard, on the third of every month starting February 3.
It's called Nyx-em - because that's what it does - delete all MS office (word, excel, powerpoint), Adobe (PDF), image and multimedia files from your hard disk.
It goes by a host of colourful aliases including KamaSutra and Blackmaal. And the suspicion is that the worm originated in India, Italy or Peru. Fuelling the rumour is a chart from the LURHQ Threat Intelligence Group that shows India had the maximum number of infections as of January 26.
It arrives via e-mail with a subject like 'School Girl Fantasies Gone Bad' - it's the sort of subject that normally ensures the e-mail will end up in the Junk Mail folder.
But opening the email on Outlook would be a very bad idea. Nyxem.E disables your anti-virus software if it isn't updated along with other security-related and file-sharing software.
But if you're running Linux, or any other operating system, you don't have to worry, the worm affects only Windows machines. When run on a Windows PC, the worm copies itself to the hard drive, shared network locations and also sends itself to e-mail addresses found on the infected computer.
It has been found that 30 minutes after the infected machine is booted, Nyxem deletes information from common file formats, replacing the data with a meaningless set of symbols.
The worm infects files with the following extensions
.HTM
.DBX
.EML
.MSG
.OFT
.NWS
.VCF
.MBX
.IMH
.TXT
.MSF
The e-mail subject lines can be one the following
The Best Videoclip Ever
School girl fantasies gone bad
A Great Video
Kama Sutra pics
Arab sex DSC-00465.jpg
give me a kiss
*Hot Movie*
Fw: Funny
Fwd: Photo
Fwd: image.jpg
F w: Sexy
Re:
Fw:
Fw: Picturs
Fw: DSC-00465.jpg
Word file
eBook.pdf
the file
Part 1 of 6 Video clipe
You Must View This
Videoclip!
Miss Lebanon 2006
Re: Sex Video
My photos
Message body could be any of the following
forwarded message
forwarded message attached.
Fuckin Kama Sutra pics
hello,
Helloi attached the details.
Hot XXX Yahoo Groups
how are you?
i just any one see my photos.
i send the details.
i send the file.
It's Free
Note: forwarded message attached. You Must View This Videoclip!
Please see the file.
ready to be FUCKED
Thank you
The Best Videoclip Ever
the file i send the details
VIDEOS! FREE! (? 0 (US$ 0,00))
What?
Attachment
007.pif
3.92315089702606E02.UUE
392315089702606E-02,.scR
392315089702606E-02,UUE{spaces*}.scR
677.pif
Adults_9,zip.sCR
ATT01.zip.sCR
Attachments00.HQX
Attachments001.BHX
Attachments[001],B64.sCr
Attachments[001].B64
Clipe,zip.sCr
document.pif
DSC-00465.pIf
eBook.PIF
eBook.Uu image04.pif
New Video,zip
New_Document_file.pif
Original Message.B64
photo.pif
Photos,zip.sCR
School.pif
SeX,zip.scR
Sex.mim
Video_part.mim
WinZip,zip.scR
WinZip.BHX
WinZip.zip.sCR
Word XP.zip.sCR
Word.zip.sCR
Word_Document.hqx
Word_Document.uu
CNN-IBN (www.ibnlive.com)
_______________________________________________
It promises naughty pictures and porn but takes away more than it delivers. It's a computer worm that's been programmed to strike, and strike hard, on the third of every month starting February 3.
It's called Nyx-em - because that's what it does - delete all MS office (word, excel, powerpoint), Adobe (PDF), image and multimedia files from your hard disk.
It goes by a host of colourful aliases including KamaSutra and Blackmaal. And the suspicion is that the worm originated in India, Italy or Peru. Fuelling the rumour is a chart from the LURHQ Threat Intelligence Group that shows India had the maximum number of infections as of January 26.
It arrives via e-mail with a subject like 'School Girl Fantasies Gone Bad' - it's the sort of subject that normally ensures the e-mail will end up in the Junk Mail folder.
But opening the email on Outlook would be a very bad idea. Nyxem.E disables your anti-virus software if it isn't updated along with other security-related and file-sharing software.
But if you're running Linux, or any other operating system, you don't have to worry, the worm affects only Windows machines. When run on a Windows PC, the worm copies itself to the hard drive, shared network locations and also sends itself to e-mail addresses found on the infected computer.
It has been found that 30 minutes after the infected machine is booted, Nyxem deletes information from common file formats, replacing the data with a meaningless set of symbols.
The worm infects files with the following extensions
.HTM
.DBX
.EML
.MSG
.OFT
.NWS
.VCF
.MBX
.IMH
.TXT
.MSF
The e-mail subject lines can be one the following
The Best Videoclip Ever
School girl fantasies gone bad
A Great Video
Kama Sutra pics
Arab sex DSC-00465.jpg
give me a kiss
*Hot Movie*
Fw: Funny
Fwd: Photo
Fwd: image.jpg
F w: Sexy
Re:
Fw:
Fw: Picturs
Fw: DSC-00465.jpg
Word file
eBook.pdf
the file
Part 1 of 6 Video clipe
You Must View This
Videoclip!
Miss Lebanon 2006
Re: Sex Video
My photos
Message body could be any of the following
forwarded message
forwarded message attached.
Fuckin Kama Sutra pics
hello,
Helloi attached the details.
Hot XXX Yahoo Groups
how are you?
i just any one see my photos.
i send the details.
i send the file.
It's Free
Note: forwarded message attached. You Must View This Videoclip!
Please see the file.
ready to be FUCKED
Thank you
The Best Videoclip Ever
the file i send the details
VIDEOS! FREE! (? 0 (US$ 0,00))
What?
Attachment
007.pif
3.92315089702606E02.UUE
392315089702606E-02,.scR
392315089702606E-02,UUE{spaces*}.scR
677.pif
Adults_9,zip.sCR
ATT01.zip.sCR
Attachments00.HQX
Attachments001.BHX
Attachments[001],B64.sCr
Attachments[001].B64
Clipe,zip.sCr
document.pif
DSC-00465.pIf
eBook.PIF
eBook.Uu image04.pif
New Video,zip
New_Document_file.pif
Original Message.B64
photo.pif
Photos,zip.sCR
School.pif
SeX,zip.scR
Sex.mim
Video_part.mim
WinZip,zip.scR
WinZip.BHX
WinZip.zip.sCR
Word XP.zip.sCR
Word.zip.sCR
Word_Document.hqx
Word_Document.uu
CNN-IBN (www.ibnlive.com)
