Post by blossomgb on Jan 31, 2006 18:34:53 GMT -5
Please read below and act on it. This is a nasty worm virus. Kids, let your Mum and Dad see this. This is from a friend of mine who is a very reliable source as he works in the IT trade.
********************************************
There seems to be a fair amount of talk and activity relating to CME-24 at the moment. See isc.sans.org/blackworm. This one disables anti-virus software and will overwrite document files (DOC, XLS, MDE, MDB, PPT, PPS, RAR, PDF, PSD, DMP and ZIP) on the 3rd Feb. As usual, the different AV vendors have different names for it - there is a list on the page linked above.
I have already had to clean up one PC with it on (a work colleague's home PC). It disabled Norton Internet Security 2004 and broke the LiveUpdate and email scanning. The repair tool from Symantec (http://securityresponse.symantec.com...oval.tool.html) cleared it, then I had to uninstall and reinstall NIS. So quite easy to clean up, at this stage. Of course after the 3rd Feb there would be a lot more damage, much of it unrepairable.
This may be why people are reporting problems getting updates for AVG Free in another thread at the moment.
Most AV vendors have had protection in their virus signatures for at least a week, so if your AV is working and up to date you should be OK. However you may want to do a full virus scan before Friday, just to make sure. Losing all the documents on your PC would ruin your day - though of course you all have current backups....
__________________
Paul Stenning
Forum Admin/Owner and BVWS Committee Member
Regards,
Blossomgb
********************************************
There seems to be a fair amount of talk and activity relating to CME-24 at the moment. See isc.sans.org/blackworm. This one disables anti-virus software and will overwrite document files (DOC, XLS, MDE, MDB, PPT, PPS, RAR, PDF, PSD, DMP and ZIP) on the 3rd Feb. As usual, the different AV vendors have different names for it - there is a list on the page linked above.
I have already had to clean up one PC with it on (a work colleague's home PC). It disabled Norton Internet Security 2004 and broke the LiveUpdate and email scanning. The repair tool from Symantec (http://securityresponse.symantec.com...oval.tool.html) cleared it, then I had to uninstall and reinstall NIS. So quite easy to clean up, at this stage. Of course after the 3rd Feb there would be a lot more damage, much of it unrepairable.
This may be why people are reporting problems getting updates for AVG Free in another thread at the moment.
Most AV vendors have had protection in their virus signatures for at least a week, so if your AV is working and up to date you should be OK. However you may want to do a full virus scan before Friday, just to make sure. Losing all the documents on your PC would ruin your day - though of course you all have current backups....
__________________
Paul Stenning
Forum Admin/Owner and BVWS Committee Member
Regards,
Blossomgb