Nyxem virus

andyandy · 30-01-2006, 18:07

Just seen this on the BBC website

http://news.bbc.co.uk/1/hi/technology/4661582.stm

Sounds nasty.

marky · 30-01-2006, 18:16

I wonder if its the same as this one on the ntl warning page
If not, it going to be a fun month

Gareth · 30-01-2006, 20:01

Yeah, that's the same one.... middle of last week, F-Secure were counting the number of infections at over 3 million PCs

but basing the number of infections just on a website counter isn't very reliable, as it might not have started at zero, and it got a lot of hits from 'casual' viewers.

The best bit I like (for want of a better word) about this virus is the subject matter of the emails it arrives in...

The Best Videoclip Ever
School girl fantasies gone bad
A Great Video
F***in Kama Sutra pics
Arab sex DSC-00465.jpg
give me a kiss
*Hot Movie*
Fw: Funny
Fwd: Photo
Fwd: image.jpg
Fw: Sexy
Re:
Fw:
Fw: Picturs
Fw: DSC-00465.jpg
Word file
eBook.pdf
the file
Part 1 of 6 Video clipe
You Must View This Videoclip!
Miss Lebanon 2006
Re: Sex Video
My photos

Is it any wonder that over 300,000 people have gotten infected with titles like that?!?

Paul K · 30-01-2006, 20:11

Quote:

Originally Posted by marky

I wonder if its the same as this one on the ntl warning page
If not, it going to be a fun month

From the info I looked at on Vforum when I posted I would think it's likely that this is a variant of it.......
Yep it is
http://isc.sans.org/diary.php?storyid=1067

Gareth · 30-01-2006, 20:39

Apparently Easynet have been monitoring which of their customers have been accessing the website and informing the customer that they're potentially infected by Nyxem.

This is a very smart move by the part of Easynet, imho, and should be applauded.

Well done, guys!

MadGamer · 30-01-2006, 20:44

Thank god that Avast auto updates itself daily.

Just created a text file to remind me to do it on the 2nd of Feb and set it as a scheduled task.

marky · 30-01-2006, 20:46

I'm going to do a deep scan in safe mode, the day before, just in case

Paul K · 30-01-2006, 20:57

God help me..... I'm running the OneCare Beta trial lol

Might have to re-install AVG and do a secondary scan just in case

Good thing it's scanning for the virus though
http://www.windowsonecare.com/secinf...opthreats.aspx
Think I'll still run AvG just in case though lol

Gareth · 30-01-2006, 21:02

The signatures are already out, so you don't have to wait till the 2nd to scan for it.

---------- Post added at 21:02 ---------- Previous post was at 21:01 ----------

Luckily I'm not on call on the 3rd.... although it'd never get past our mailsweepers in any case

Down the Pub · 30-01-2006, 21:39

is this version the same as here?

http://securityresponse.symantec.com...kmal.e@mm.html

seems that there are a few name varients to this virus, there's also a free fix tool on the page just in case, but crossings of fingers and all other crossable limbs might help

..........and keeping updates in order

Stuart · 30-01-2006, 23:34

Funny, Mcafee rate it as a low risk, and on that page above, fsecure say it's infected 262,000 PCs.

http://vil.nai.com/vil/content/v_138027.htm

---------- Post added at 23:34 ---------- Previous post was at 23:29 ----------

Having said the above, it's always a good idea to make sure you have an up to date Antivirus, antispyware and firewall.

grubbymitts · 31-01-2006, 08:24

it is low risk - only the stooooooooooooooooooopid would click the attachment. I haven't received it, so it looks like NTL are ripping it before it reaches anyone.

Email viruses are rather old hat now.

nemesis01 · 31-01-2006, 09:02

it's not the virus that infects machines, it's stupid users....

Paul K · 31-01-2006, 12:56

Quote:

Originally Posted by grubbymitts

it is low risk - only the stooooooooooooooooooopid would click the attachment. I haven't received it, so it looks like NTL are ripping it before it reaches anyone.

Email viruses are rather old hat now.

Well obviously the 3m+ stupid people who clicked the attachment already would like to speak to you about that view

Unfortunately people open attachments as sometimes these viri are written in such a way as to make people believe that people they know have sent them something to look at. On other occassions it's just people who are not "wordly wise" to the Internet that get caught out and then propogate the virus. Not everyone with a PC and internet connection are experienced enough to know of all the dangers that they could face when they open a browser or read an email.

AndrewJ · 31-01-2006, 13:14

Well family friends in scotland who are not computer savvy have got it, and trying to explain how to remove it is not easy, plus office 2003 has stopped working for them.

Guess I have a train trip...how much is it from Manchester to Carlise this time of year