Friday, February 03, 2006

Nyxem Virus: Be aware!

On Friday 3rd February (and any month, actually), the payload of the Nyxem virus (aka Blackworm, Blackmal, Blueworm, Grew) is due to trigger. The virus attempts to disable antivirus programs: If your antivirus program will do a scan and will update, you almost certainly do NOT have this virus.

The virus deletes from the infected machine ALL documents with the extensions: DOC, XLS, MDB, MDE, PPT, PPS, ZIP, RAR, PDF, PSD, DMP (That's Word, Excel, Access, Powerpoint, archive files, PDFs, and a few others)
NB. As there are several variants of Nyxem, this list may be incomplete. The virus may be able to delete from your hard drive and other networked drives as well.

Antivirus vendors have had detection for this virus in place for some time, but it would be wise to check that you've been getting your updates, and to do a full scan of your drive if you don't normally do one regularly.

Should it be required, a removal tool for some variants is available from: http://www.sophos.com/support/disinfection/nyxem.html

References: http://www.sophos.com/support/disinfection/nyxem.html,
Tags: Nyxem, Virus, Antivirus,

No comments: