Nyxem virus
 

Just seen this on the BBC website

http://news.bbc.co.uk/1/hi/technology/4661582.stm

Sounds nasty.

Re: Nyxem virus
 

I wonder if its the same as this one on the ntl warning page
If not, it going to be a fun month :(

Re: Nyxem virus
 

Yeah, that's the same one.... middle of last week, F-Secure were counting the number of infections at over 3 million PCs :Yikes: but basing the number of infections just on a website counter isn't very reliable, as it might not have started at zero, and it got a lot of hits from 'casual' viewers.

The best bit I like (for want of a better word) about this virus is the subject matter of the emails it arrives in...

The Best Videoclip Ever
School girl fantasies gone bad
A Great Video
F***in Kama Sutra pics
Arab sex DSC-00465.jpg
give me a kiss
*Hot Movie*
Fw: Funny :)
Fwd: Photo
Fwd: image.jpg
Fw: Sexy
Re:
Fw:
Fw: Picturs
Fw: DSC-00465.jpg
Word file
eBook.pdf
the file
Part 1 of 6 Video clipe
You Must View This Videoclip!
Miss Lebanon 2006
Re: Sex Video
My photos

Is it any wonder that over 300,000 people have gotten infected with titles like that?!? :D

Re: Nyxem virus
 

From the info I looked at on Vforum when I posted I would think it's likely that this is a variant of it.......
Yep it is
http://isc.sans.org/diary.php?storyid=1067

Re: Nyxem virus
 

Apparently Easynet have been monitoring which of their customers have been accessing the website and informing the customer that they're potentially infected by Nyxem.

This is a very smart move by the part of Easynet, imho, and should be applauded. :clap: Well done, guys!

Re: Nyxem virus
 

Thank god that Avast auto updates itself daily. :tu:

Just created a text file to remind me to do it on the 2nd of Feb and set it as a scheduled task.

Re: Nyxem virus
 

I'm going to do a deep scan in safe mode, the day before, just in case ;)

Re: Nyxem virus
 

God help me..... I'm running the OneCare Beta trial lol :disturbd: Might have to re-install AVG and do a secondary scan just in case ;)
Good thing it's scanning for the virus though
http://www.windowsonecare.com/secinf...opthreats.aspx
Think I'll still run AvG just in case though lol

Re: Nyxem virus
 

The signatures are already out, so you don't have to wait till the 2nd to scan for it.

---------- Post added at 21:02 ---------- Previous post was at 21:01 ----------

Luckily I'm not on call on the 3rd.... although it'd never get past our mailsweepers in any case ;)

Re: Nyxem virus
 

is this version the same as here?

http://securityresponse.symantec.com...kmal.e@mm.html

seems that there are a few name varients to this virus, there's also a free fix tool on the page just in case, but crossings of fingers and all other crossable limbs might help :D ..........and keeping updates in order

Re: Nyxem virus
 

Funny, Mcafee rate it as a low risk, and on that page above, fsecure say it's infected 262,000 PCs.

http://vil.nai.com/vil/content/v_138027.htm

---------- Post added at 23:34 ---------- Previous post was at 23:29 ----------

Having said the above, it's always a good idea to make sure you have an up to date Antivirus, antispyware and firewall.

Re: Nyxem virus
 

it is low risk - only the stooooooooooooooooooopid would click the attachment. I haven't received it, so it looks like NTL are ripping it before it reaches anyone.

Email viruses are rather old hat now.

Re: Nyxem virus
 

it's not the virus that infects machines, it's stupid users....

Re: Nyxem virus
 

Well obviously the 3m+ stupid people who clicked the attachment already would like to speak to you about that view ;)
Unfortunately people open attachments as sometimes these viri are written in such a way as to make people believe that people they know have sent them something to look at. On other occassions it's just people who are not "wordly wise" to the Internet that get caught out and then propogate the virus. Not everyone with a PC and internet connection are experienced enough to know of all the dangers that they could face when they open a browser or read an email.

Re: Nyxem virus
 

Well family friends in scotland who are not computer savvy have got it, and trying to explain how to remove it is not easy, plus office 2003 has stopped working for them.

Guess I have a train trip...how much is it from Manchester to Carlise this time of year :rofl:

Re: Nyxem virus
 

I believe it's nearer 300,000 than 3M, and the infection rates are mostly highest in India, Peru and Italy.

For those who are interested in following this, there is some great info here: http://www.lurhq.com/blackworm-stats.html

---------- Post added at 13:19 ---------- Previous post was at 13:16 ----------

Well, they're one of only 1960 infected PCs in the UK, if that's any consolation ;)

Instead of visiting them, why not use the tool made available by F-Secure to remove this virus... http://www.f-secure.com/v-descs/nyxem_e.shtml