contents

software
 
A New Nurech Worm Exploits Valentine's Day to Infect Computers

PandLabs has detected the Nurech.B worm, which arrives under the guise of Valentine's messages. Its predecessor, Nurech.A, caused an orange alert status some days ago using the same means. Panda's TruPrevent proactive technologies have detected and blocked Nurech.B with no need for prior identification.

The email messages carrying Nurech.B have a variable subject. These include: "Happy Valentine's Day", "Valentines Day Dance", "The Valentines Angel". The email sender also varies, although it is always a woman's name such as Sandra, Willa, Wendy o Vicky. The message attachment containing the worm simulates an e-greeting card, using names like "Greeting Postcard.exe", "Greeting card.exe" or "Postcard.exe".

If users run the attached file, the worm creates various files on the computer. One of them is a copy of itself, while another is a rootkit that conceals Nurech.B's presence. The worm also disables various security applications that could be installed on the system.



write your comments about the article :: © 2007 Computing News :: home page