Nyxem.E Infections Growing Quickly

Infections of the Nyxem.E Worm are growing quickly, as reported by F Secure. They have spotted a counter that is supposed to be counting the number of infected computers and it is already over 500,000. Of course that could be a made up number, they could’ve started at 300,000, etc, but could be growing rapidly.

The worm’s destructive payload activates on every third day of the month by replacing the content of user’s files with a text string “DATA Error [47 0F 94 93 F4 K5]“. Among these files are: DOC, XLS, MDB, MDE, PPT, PPS, ZIP, RAR, PDF, PSD and DMP.

The worm also has an interesting feature: it increases a counter on a website every time a new machine gets infected. When we first saw the counter (earlier today) it was below 300,000 . Now it’s already over 417,000 and growing. The counter didn’t necessarily start from zero.

I recommend you get Panda Internet Security right now to make sure you are secure. Or try their Free Online Scan.

No Comments »

No comments yet.

RSS feed for comments on this post. | TrackBack URI

Leave a comment