homecomputeraid Posted February 2, 2006 Report Share Posted February 2, 2006 The following was in my Spyware Weekly Newsletter available for subscription here (this particular article doesn't show up there yet, but was sent to subscribers).Special EditionThe Kama Sutra worm, which has numerous aliases, is set to deliver its first destructive payload TOMORROW (February 3). This worm is believed to have infected anywhere from 200,000 to 700,000 computers worldwide.The worm is programmed to destroy numerous antivirus program files and Microsoft Office document files, thirty minutes after an infected machine is powered up, on the third day of each month. Microsoft has included detection for this worm in its Malicious Software Removal Tool. However, Microsoft is withholding that update from all but paying members of their "Windows Live Safety" and "OneCare" beta services. Microsoft refuses to release the update to the general public, before their regularly scheduled general update, on February 14th. I will have plenty to say about that in tomorrow's newsletter, believe me.Whether you believe that you are infected or not, you should take precautionary steps now, just in case. Any documents created by Microsoft Office as well as .rar and .zip archives should be backed up and stored on separate, removable storage, such as a CD or DVD. Files and documents of this type will be corrupted beyond repair on infected machines.Symantec has released a free tool that will remove the virus. Download the tool and run it, even if you are certain that you are not infected. It is a very small file and you have nothing to lose by running it. You don't want to be wrong and lose your boss's spreadsheets, now do you?http://securityresponse.symantec.com/avcen...moval.tool.htmlIf you already have an antivirus program, make certain it is updated and run a full scan of your computer.The regular Spyware Weekly Newsletter should be released sometime tomorrow (Friday). Quote Link to comment Share on other sites More sharing options...
deuces wild Posted February 2, 2006 Report Share Posted February 2, 2006 Thanks!! :) Quote Link to comment Share on other sites More sharing options...
r4may Posted February 2, 2006 Report Share Posted February 2, 2006 Just checked my protection programs All up to date :- Thanks :) Quote Link to comment Share on other sites More sharing options...
andsome Posted February 3, 2006 Report Share Posted February 3, 2006 Many thanks, running it right now. Quote Link to comment Share on other sites More sharing options...
dadyassa Posted February 3, 2006 Report Share Posted February 3, 2006 Thanks homecomputeraid, just running it ;) Quote Link to comment Share on other sites More sharing options...
andsome Posted February 3, 2006 Report Share Posted February 3, 2006 All clear. Quote Link to comment Share on other sites More sharing options...
homecomputeraid Posted February 6, 2006 Author Report Share Posted February 6, 2006 I've run it on several corporate and home computers and haven't found it yet. Good to have a tool to remove it if I suspect it's causing problems though since it attacks antivirus programs! Quote Link to comment Share on other sites More sharing options...
dadyassa Posted February 6, 2006 Report Share Posted February 6, 2006 Thanks for the links, but since signing for the news letter I have received about 20 valium emails all from the US. I am on a Spanish ISP and never usually receive spam, or is it just coincidence ?Hi, http://www. ferrymande .com and http://www. hadiminus .com Vo Am La Iz Ua Mz n $c 1y ,d 2k 1d Vt Iq Ab Gu Rd Ar q $r 3x ,e 3a 3n Cf Is Am Lq Ip St x $f 3i ,m 7t 5n Tried to copy email, but shows as above Quote Link to comment Share on other sites More sharing options...
andsome Posted February 7, 2006 Report Share Posted February 7, 2006 Thanks for the links, but since signing for the news letter I have received about 20 valium emails all from the US. I am on a Spanish ISP and never usually receive spam, or is it just coincidence ?Hi, http://www. ferrymande .com and http://www. hadiminus .com Vo Am La Iz Ua Mz n $c 1y ,d 2k 1d Vt Iq Ab Gu Rd Ar q $r 3x ,e 3a 3n Cf Is Am Lq Ip St x $f 3i ,m 7t 5n Tried to copy email, but shows as aboveNo spam here, but then of course it is well known that I have no need of Viagra. :D Quote Link to comment Share on other sites More sharing options...
-pops- Posted February 7, 2006 Report Share Posted February 7, 2006 Is it Viagra or Valium we are talking about here? Quote Link to comment Share on other sites More sharing options...
andsome Posted February 7, 2006 Report Share Posted February 7, 2006 Is it Viagra or Valium we are talking about here?I speed read, and got the word wrong. I don't need either. Quote Link to comment Share on other sites More sharing options...
dadyassa Posted February 7, 2006 Report Share Posted February 7, 2006 Is it Viagra or Valium we are talking about here?Vo Am La Iz Ua Mz , Vt Iq Ab Gu Rd Ar , Cf Is Am Lq Ip St It is valium, viagra, and cialis, whatever that is, but they are all addressed to wierd named accounts, all with exactly the same content but from different people. It is in a list but when copied it shows in capitols with another letter beside it. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.