ESET Advises Precautions Against Win32/VB.NEI Worm

Potentially Devastating Worm Also Known as Blackmal, Nyxem, Mywife, Kama Sutra, CME-24
Set to Activate on February 3


Win32/VB.NEI is a typical mass-mailing email worm which generally relies on users to click on an attachment to execute. It also attempts to spread via network shares. The worm is compressed down to 95,690 bytes using the UPX runtime executable packer. On the third day of every month, starting on February 3, 2006, Win32/VB.NEI will attempt to overwrite popular security applications along with files that have any of the following extensions:
1 Microsoft Files- .doc, .xls, .mdb, mde, .ppt, .pps
2 Archive Files- .zip, .rar
3 Adobe Acrobat or Photoshop files- .pdf, .psd

Computers without adequate protection from the Win32/VB.NEI worm could suffer devastating data loss. ESET recommends that organizations and individuals follow three safe practices.
1. Avoid social engineering tricks – Do not click on email attachments or links in emails. Verify that the sender is a trusted source. Then, save attachments to your disk, examine the real filename first.
2. Ensure that you’re running proactive antivirus software that excels at detecting new zero-day threats. Recent comparative tests performed by AV-Test.org, an independent antivirus and anti-spyware testing organization, located at the University of Magdeburg, show ESET’s NOD32 detected the worm proactively – without signature updates. Results are published here: http://www.pcmag.com/article2/0,1895,1916880,00.asp
3. Implement and practice a consistent, frequent backup policy. Data loss can occur for many reasons not attributed to malware. It’s good to be safe.


Ok heres our findings!

So campers take warning your operating system will be fine but all your data will be destroyed.We have tested this worm in the lab most of the day and it does what it says it will do. It destroys data files
I thought I give y'all a heads up. =]

GOOD LUCK.=]

 

Thanks for the warning freebird, even over here in australia we are recieving the warnings. I have norton antivius and I will not open any attachs that I do not know the source. Hope all will be well
Gav

 

It olny goes out on the third day of the month? Pretty sly.....

 

Thanks for the heads up on the worm.

 

I don't open ANY forwarded messages, or ANY messages from unknown sources.

Besides, how many of those sappy tear jerker stories can you stand. You know the kind that say at the end, that if you care about humanity you will forward it to everyone you know. If you delete it, you are the most heartless human on the planet.

I got sick of those back in the nineties and don't even open them any more.

 

connected to bombers picture where he is holding the trophy with a lady and another guy after viewing the picture a commasutra video popped up asking you to open. the photo was sent via email and thats what appeared.

 

So the only way to get it is through email?

 

it seems to attach itself onto the email after viewing the picture they scrolled down and a video cassette case started flashing on the cover it said karma sutra wanting you to click on it at that point we they had already heard about it so they did not click on it.

 

No but thats the most popular way, any link you click could be it. So make sure you know what your clicking and where it is before you do.

 

and this is related to bombs how? move it off the forum.