
02/02/2006 04:51 PM
|
|
|
ESET Advises Precautions Against Win32/VB.NEI Worm
Potentially Devastating Worm Also Known as Blackmal, Nyxem, Mywife, Kama Sutra, CME-24 Set to Activate on February 3
Win32/VB.NEI is a typical mass-mailing email worm which generally relies on users to click on an attachment to execute. It also attempts to spread via network shares. The worm is compressed down to 95,690 bytes using the UPX runtime executable packer. On the third day of every month, starting on February 3, 2006, Win32/VB.NEI will attempt to overwrite popular security applications along with files that have any of the following extensions: 1 Microsoft Files- .doc, .xls, .mdb, mde, .ppt, .pps 2 Archive Files- .zip, .rar 3 Adobe Acrobat or Photoshop files- .pdf, .psd
Computers without adequate protection from the Win32/VB.NEI worm could suffer devastating data loss. ESET recommends that organizations and individuals follow three safe practices. 1. Avoid social engineering tricks – Do not click on email attachments or links in emails. Verify that the sender is a trusted source. Then, save attachments to your disk, examine the real filename first. 2. Ensure that you’re running proactive antivirus software that excels at detecting new zero-day threats. Recent comparative tests performed by AV-Test.org, an independent antivirus and anti-spyware testing organization, located at the University of Magdeburg, show ESET’s NOD32 detected the worm proactively – without signature updates. Results are published here: http://www.pcmag.com/article2/0,1895,1916880,00.asp 3. Implement and practice a consistent, frequent backup policy. Data loss can occur for many reasons not attributed to malware. It’s good to be safe.
Ok heres our findings!
So campers take warning your operating system will be fine but all your data will be destroyed.We have tested this worm in the lab most of the day and it does what it says it will do. It destroys data files I thought I give y'all a heads up. =]
GOOD LUCK.=]
-------------------------
2004 DS650X (Rotax) 800 Open Mod (Rotax) 1991 Mach1 617 on NOS (Rotax) 2001-250 Honda Recon 1975 250 CanAm MX2 (Rotax) I miss that bike. 1996 D3500 V10 425hp 1996 Harley Davidson 833 XLH Custom 1958 Wife "Soulmate"
Obey Gravity....It's the law!
Nothing like the smell of Klotz 118 Octane racing fuel.
|
|
|
|

02/02/2006 05:13 PM
|
raptorgav
Pro Rider

Posts: 213
Joined: 06/26/2004
|
Thanks for the warning freebird, even over here in australia we are recieving the warnings. I have norton antivius and I will not open any attachs that I do not know the source. Hope all will be well Gav
-------------------------
02 Raptor 730 04 DS 650 BAJA X
|
|
|
|

02/02/2006 05:17 PM
|
DragonDJ11
Pro Rider

Posts: 2346
Joined: 07/02/2005
|
It olny goes out on the third day of the month? Pretty sly.....
-------------------------
05 DS650X<BR>Slower then some, faster then others!!!<BR> <BR>Nightmares about my bike eating doller signs like Pac-Man...I don't think it will ever end. Power hungry
|
|
|
|

02/02/2006 05:20 PM
|
|
|
Thanks for the heads up on the worm.
-------------------------
05' DS650 (Viper Red) K&N filter Shrouds Shock Covers (red) Pro Taper Bars NerfBars RonWoods Clutch Springs 60% WhiteBrothers Pipe E-Series
BioWare Racing
|
|
|
|

02/02/2006 05:46 PM
|
JayDeeCoy
Pro Rider

Posts: 214
Joined: 03/29/2005
|
I don't open ANY forwarded messages, or ANY messages from unknown sources. Besides, how many of those sappy tear jerker stories can you stand. You know the kind that say at the end, that if you care about humanity you will forward it to everyone you know. If you delete it, you are the most heartless human on the planet. I got sick of those back in the nineties and don't even open them any more.
-------------------------
2006 Outlander 800  (Note; All CC's actually IN the engine, Not just ON the decals) 2003 Rincon Both green.
|
|
|
|

02/02/2006 06:14 PM
|
2BIG2BFAST
Pro Rider

Posts: 2003
Joined: 11/16/2004
|
connected to bombers picture where he is holding the trophy with a lady and another guy after viewing the picture a commasutra video popped up asking you to open. the photo was sent via email and thats what appeared.
-------------------------
craig from cp customs is a crook. dont use them.
|
|
|
|

02/02/2006 06:47 PM
|
BigWaynester
Pro Rider

Posts: 1738
Joined: 01/14/2001
|
So the only way to get it is through email?
|
|
|
|

02/02/2006 09:13 PM
|
2BIG2BFAST
Pro Rider

Posts: 2003
Joined: 11/16/2004
|
it seems to attach itself onto the email after viewing the picture they scrolled down and a video cassette case started flashing on the cover it said karma sutra wanting you to click on it at that point we they had already heard about it so they did not click on it.
-------------------------
craig from cp customs is a crook. dont use them.
|
|
|
|

02/03/2006 07:09 AM
|
|
|
Quote
Originally posted by: BigWaynester So the only way to get it is through email?
No but thats the most popular way, any link you click could be it. So make sure you know what your clicking and where it is before you do.
-------------------------
2004 DS650X (Rotax) 800 Open Mod (Rotax) 1991 Mach1 617 on NOS (Rotax) 2001-250 Honda Recon 1975 250 CanAm MX2 (Rotax) I miss that bike. 1996 D3500 V10 425hp 1996 Harley Davidson 833 XLH Custom 1958 Wife "Soulmate" Obey Gravity....It's the law!Nothing like the smell of Klotz 118 Octane racing fuel.
|
|
|
|

02/03/2006 12:34 PM
|
smoothguy
Range Rover

Posts: 168
Joined: 01/14/2006
|
and this is related to bombs how? move it off the forum.
-------------------------
Love the Bomb machines, but hate the crappy BRP customer service when you call Canada!! Screw you BRP, you SUCK and will never see my money again!2006 Arctic Cat Prowler - faster than my Outlander! 2006 Max XT 400 - overweight! 2004 Rev 600HO 2002 MXZ 6002006 BMW 750Li 2004 Tahoe LT - another overweight pig! 2002 Z06 - the best toy in the garage!
|
|
|
|

02/03/2006 12:44 PM
|
DragonDJ11
Pro Rider

Posts: 2346
Joined: 07/02/2005
|
Quote
Originally posted by: smoothguy and this is related to bombs how? move it off the forum.
This is good to know. I would hate for one of our turbo guys to download this into his EFI and have it screw up his air/fuel ratios and over boost the ride. Can never be too careful when it comes to worms  There now it relates to the bombs.
-------------------------
05 DS650X<BR>Slower then some, faster then others!!!<BR> <BR>Nightmares about my bike eating doller signs like Pac-Man...I don't think it will ever end. Power hungry
|
|
|
|

02/03/2006 01:08 PM
|
|
|
Quote
Originally posted by: DragonDJ11
Quote
Originally posted by: smoothguy and this is related to bombs how? move it off the forum.
This is good to know. I would hate for one of our turbo guys to download this into his EFI and have it screw up his air/fuel ratios and over boost the ride. Can never be too careful when it comes to worms 
There now it relates to the bombs. 
Thanks Dragon.......I didn't look at it that way. lol. =] But that said its kinda nice to be able to come to this forum and read about atv's kinda hard to do that with a hosed computer. lol. Man It would suck to have all your diagnostic data that you have been saving for years, or your excel or pdf data sheets with OEM part numbers or Calibration figures destroyed. Makes you wonder how many pdf manuals one can have. But hey Guys like Oldmanracing can just start over, right! Smoothguy...........HPR and AVI can just make some new CNC input programs. It's easy anyone can do it so your right Smoothguy it should be removed. Dam am I pissy today or what. lol. =]
-------------------------
2004 DS650X (Rotax) 800 Open Mod (Rotax) 1991 Mach1 617 on NOS (Rotax) 2001-250 Honda Recon 1975 250 CanAm MX2 (Rotax) I miss that bike. 1996 D3500 V10 425hp 1996 Harley Davidson 833 XLH Custom 1958 Wife "Soulmate" Obey Gravity....It's the law!Nothing like the smell of Klotz 118 Octane racing fuel.
|
|
|
|

02/03/2006 02:58 PM
|
|
|
Quote
Originally posted by: xFreebirdx
Dam am I pissy today or what. lol. =]
Dang FB, head over to Dumass's bar and I'll buy you a cold one.
-------------------------
If it take more than 3 bolts to hold it on, it's probably crucial.
|
|
|
|

02/03/2006 03:05 PM
|
|
|
Quote
Originally posted by: Scootergptx
Quote
Originally posted by: xFreebirdx
Dam am I pissy today or what. lol. =]
Dang FB, head over to Dumass's bar and I'll buy you a cold one. 
Thanks man. It's prolly just what the doctor would order right about now. lol. =]
-------------------------
2004 DS650X (Rotax) 800 Open Mod (Rotax) 1991 Mach1 617 on NOS (Rotax) 2001-250 Honda Recon 1975 250 CanAm MX2 (Rotax) I miss that bike. 1996 D3500 V10 425hp 1996 Harley Davidson 833 XLH Custom 1958 Wife "Soulmate" Obey Gravity....It's the law!Nothing like the smell of Klotz 118 Octane racing fuel.
|
|
|