Friday, January 27, 2006

A new internet threat is looming for 2/3/2006

It's generic name is "Blackworm" and if the folks at the Internet Storm Center are right - and they usually are - it is going to become a serious problem on February 3, 2006. While the actual number of people that will be affected is not as great as for some earlier threats, those that are affected are going to be seriously hurt.

"Blackworm" is set to activate on February 3, 2006 and when it does, it will begin deleting files on the hard drives of infected computers. It will also harvest email addresses and attempt to send itself to the addresses it finds. A very decent technical writeup can be found HERE.
The writeup includes the files types that will be targets, names of attachments and subject lines. You can also find links to Symantec's removal tool.

What can you do to protect yourself? Here are a few simple steps:

1. Do not open any attachments that you receive with your email.

2. Update your virus scan patterns at least daily.

3. Run a full scan of your personal computer right now to make sure
that you are not already infected.

4. Make sure that your ISP is providing frontend virus scanning. If not,
dump them and find one that will.

5. Don't Panic.

For the long haul, two additional steps will help significantly: disable ActiveX in Windows and do not send or accept html formatted email (use text only).

Right now it looks as if the large majority of infected computers are located in India with a fair number right here in the good old USA. It is anticipated that it will spread even more prior to February 3, 2006.

The internet can be a downright unfriendly place to visit but if you take common sense steps such as always using antivirus protection, you can deflect much of the risk and make the most of your time on the net.

Created: January 27, 2006
Updated: January 27, 2006

(c)2006 Dogsoldier.com

No comments: