February 1, 2006

Microsoft has been reported to start preparing its Windows users for the arrival this week of the Blackworm virus, a mass mailing malware program expected to infiltrate and damage computers and laptops on Friday, Feb. 3.

Microsoft, which calls the socially inclined virus Win32/Mywife.E@mm, said the worm tries to lure users to open an attached file in an email message.

But if the recipient opens the file, the malware sends itself to all the contacts in the computer's e-mail client address book.

The malware also attempts to scan the network looking for systems it can connect to and infect. If it fails to connect to one of these systems, logs on with "Administrator" as the user name together with a blank password, Microsoft said in a security advisory this week.

Blackworm, also known as Blackmal, Nyxem, MyWife, Tearec and KamaSutra, places a malicious zip file icon somewhere on the system.

The malware is designed to wreck a number of common document format files on the third day of every month.

Feb. 3, 2006, is the first time this malware is expected to corrupt the content of specific document format files, including all .doc (Microsoft Word), .xls (Microsoft Excel), .ppt/.pps (Microsoft PowerPoint) and .pdf files, among others.

What makes the Blackworm so vexing to security experts is that the malware also modifies or deletes files and registry keys associated with certain computer security applications, stopping them before they can counter the Blackworm.

Microsoft said customers infected with the Mywife malware should contact their antivirus vendor.

Customers may also visit the Windows Live Safety Center Web site to procure a scan to ensure their systems are free of infection.

Microsoft also noted the Windows OneCare Live Beta detects and protects computers from the Blackworm and its variants.

Source: Internet News

Save Internet Security.ca's URL to the list of your favorite web sites in your Web browser by clicking here.

Become an authorized reseller of Proxy Sentinel™ and Firewall Sentinel™. Do like the rest of our authorized resellers and have your clients benefit the important security features of our products and solutions, while increasing your sales at the same time. Click here for all the details.

You can link to the Internet Security web site as much as you like. Read our section on how your company can participate in our reciprocal link exchange program and increase your rankings in the major search engines such as
Google and all the others.