Blackworm

Blackworm
For the animal, see Lumbriculus variegatus.

Blackworm is an Internet worm discovered on January 20, 2006 that infects several versions of Microsoft Windows. It is also known as Grew.a, Grew.b, Blackmal.e, Nyxem.e, Nyxem.d, Mywife.d, Tearec.a, CME-24, and Kama Sutra.

Blackworm spreads mainly by sending infected e-mail attachments, but also infects other computers by copying itself over network shares. The virus removes antivirus programs from remote computers before attempting to infect them. When first installed, it copies itself to the Windows and system directories. It uses filenames that resemble those of legitimate Windows system files in an attempt to remain hidden. It activates on the third day of each month; the first known activation happened on February 3, 2006[1][2]. On activation, the virus overwrites data files of many common types, including Word, Excel, and PowerPoint documents; ZIP and RAR archives; and PDFs. It can destroy files on fixed and removable drives and tries, but fails, to affect data on network drives. It also attempts to disable antivirus programs by removing the registry entries that automatically run them and deleting the antivirus programs directly.

The virus visits a tracking Web page each time it infects a computer. Over 300,000 unique IPs visited that site[3], suggesting that at least that many computers suffered infection. It is not known how many of them remained infected long enough to trigger the virus’s payload.

References

  1. ^ Description of Blackworm from the Internet Storm Center
  2. ^ LURHQ Threat Intelligence Group BlackWorm Hostile Payload Scheduled to Activate Feb 3
  3. ^ Description of Blackworm from F-Secure

External links

Monitor padlock.svg Computer security portal

Wikimedia Foundation. 2010.

Игры ⚽ Нужно сделать НИР?

Look at other dictionaries:

  • blackworm — noun An oligochaete, Lumbriculus variegatus, found in shallow water marshes, ponds, and swamps in North America and Europe, feeding on microorganisms and organic material …   Wiktionary

  • Lumbriculus variegatus — Taxobox name = Lumbriculus variegatus regnum = Animalia phylum = Annelida classis = Clitellata subclassis = Oligochaeta ordo = Lumbriculida familia = Lumbriculidae genus = Lumbriculus species = L. variegatus binomial = Lumbriculus variegatus… …   Wikipedia

  • Nyxem Worm — is a mass mailing computer worm discovered on January 3, 2006. It tries to spread using remote shares, activating itself on the 3rd of every month. Nyxem Worm also tries to disable security related and file sharing software as well as destroying… …   Wikipedia

  • Blood worm — or bloodworm is an ambiguous term and can refer to:*The larva of a non biting midge (Family Chironomidae) containing hemoglobin *The polychaete Glycera, often used for fishing bait *The worm, Lumbriculus variegatus, more commonly called blackworm …   Wikipedia

  • Lumbriculidae — Taxobox name = Lumbriculidae regnum = Animalia phylum = Annelida classis = Clitellata subclassis = Oligochaeta ordo = Lumbriculida familia = LumbriculidaeThe Lumbriculidae are a family of microdrile oligochaetes common in fresh water environments …   Wikipedia

  • Kama Sutra (Internet worm) — The Kama Sutra worm, also known as Blackworm, Nyxem, and Blackmal, is a type of malware, or malicious software that infects PCs using the Windows operating system.Discovered January 16, 2006 Kama Sutra was designed to destroy common files such as …   Wikipedia

  • Witty-Wurm — Der Witty Wurm ist ein Computerwurm, der sich ab dem 19. März 2004 im Internet verbreitete, mittlerweile aber nicht mehr in the wild vorzukommen scheint. Der Wurm ist auch unter dem Namen Blackworm bekannt. In Malware Datenbanken ist er meist… …   Deutsch Wikipedia

  • Wittywurm — Der Witty Wurm ist ein Computerwurm, der sich ab dem 19. März 2004 im Internet verbreitete, mittlerweile aber nicht mehr in the wild vorzukommen scheint. Der Wurm ist auch unter dem Namen Blackworm bekannt. In Malware Datenbanken ist er meist… …   Deutsch Wikipedia

Share the article and excerpts

Direct link
… Do a right-click on the link above
and select “Copy Link”