New mass mailer spreading (Blackmal/Grew/Nyxem), (Wed, Jan 18th)

 

NYXEM/BLACKWORM/KAMASUTRA - WORM REMOVAL AND PROTECTION INSTRUCTIONS - CLICK HERE

New mass mailer spreading (Blackmal/Grew/Nyxem), (Wed, Jan 18th) -

We got several submissions of new mass mailer worm spreading around. Besides the usual stuff that worms do these days (disable AV programs, scan the local system to find new e-mail addresses) this one is a bit more interesting as the attachment can be either an executable file or a MIME file that contains an executable file.The sample we received had attachment named Attachments00.HQX - which is actually just an uuencoded file:begin 664 Attachments,zip .SCRM35J

[SANS Internet Storm Center]
From CyberNoggin.com - Delete email from people you don't know, don't let your curiosity get you into trouble!

Submitted by cybernoggin on Wed, 01/18/2006 - 5:54am. categories [ | ] cybernoggin's blog | login or register to post comments