New E-mail Worm disseminates as a nuclear war hoax
November 13, 2006
Virus Monitoring Service of Doctor Web, Ltd. informs on dissemination of a new e-mail worm, classified by Dr.Web as Win32.Dref. Other vendors have called it Email-Worm.Win32.Luder.a, Email-Worm.Win32.Glowa or Worm.Glowa. The worm emerged in the beginning of November and currently has over a dozen of modifications.
The infected e-mails alert on a nuclear war, allegedly waged between Russian Federation and the USA and offer credulous users to go into the war details - such as both presidents’ deaths – by reading the attachments, which are EXE-files (open.exe, truth.exe, war.exe, last.exe, about me.exe, a.exe, never.exe, latest news.exe, read me.exe).
Being run by a careless user, the worm infects all exe. files, adds an exe.file to all found directories and creates self-copies with the *t extension at the network resources. During the next system startup it demonstrates itself rather queerly – there’s no virus body in the infected files, but a short code which runs the main body from another file. Thus the worm gradually slows down the PC operation speed.
Doctor Web, Ltd. calls all users not to open e-mails from unknown senders and never open their attachments.
If you think your computer was infected by Win32.Dref and you have no anti-virus installed, Dr.Web CureIt! free utility will help you to cure correctly all your exe. files. It is strongly recommended to run Dr.Web scanner to detect all infected rar-archives. Note, that Dr.Web doesn’t cure archives. When you find an infected archive, you’ll have to delete the copy of the worm manually.
More details about Dr.Web CureIt! free utility.
Other news
|
 |
My five cents
|
 |
| |
What is the screen size of your monitor?
|
 |
|
 |
|
 |
|
