Re: New VB SMTP worm

Hi,
the new variant has been dubbed as Nyxem.E by F-Secure, and they also issued
a Radar level 2 alert on it.
It's picking up speed quite nicely. It loads a certain webpage containing a
counter when it starts up. Yesterday F-Secure
reported the counter to be about 400000. At the moment it is over 510000 and
still climbing. What makes it nastier than others is
the destructive payload, activating on 3rd day of every month wiping out
several different document types.
For more info check out:
http://www.f-secure.com/v-descs/nyxem_e.shtml

Toni Koivunen
----- Original Message -----
From: "Lawson, Joseph" <[email protected]>
To: <[email protected]>
Sent: Thursday, January 19, 2006 9:42 PM
Subject: New VB SMTP worm


Has anyone else seen or heard about this worm?
http://www.f-secure.com/v-descs/vb_bi.shtml
http://www.quickheal.co.in/public/alerts/i-worm.VB_Bi.asp
I actually got first wind of it from a user.  The security info was
listed two days ago.  Is this just a rehash of old worms?

Joseph Lawson
Associate, Information Technology
Perrin Quarles Associates, Inc.
[email protected]