BlackWorm (MyWife.d)

[igual]

ZoneAlarm® Antivirus will protect you against the BlackWorm (MyWife.d) scheduled to attack on Feb. 3, 2006

Severity: High Risk

BlackWorm is a new and potentially destructive Internet worm currently making its way around the globe. It is infecting users via e-mail and is scheduled to destroy all Microsoft Word, Excel, PowerPoint, PDF, PSD and ZIP files on Feb. 3.

If you upgrade to ZoneAlarm Antivirus before Feb. 3, it will detect and remove existing BlackWorm infections and prevent future infections.

got this in my email today
anybody know much about this badboy ?

[liam858]

It is known as Blackworm/Kama Sutra, and is classed as an "Old-School" type virus, which is created to destroy data.

Check this out: http://www.theregister.co.uk/2006/02...y_virus_chart/


Liam

[usil]

I know one thing. This baby is gonna make me a whole bunch of money.

[photolady]

Ditto what usil says.

[Welshjim]

Of possible interest
http://www.microsoft.com/security/en...32/Mywife.E@mm
Near the end MS offers two scanners.

[crunchie]

A fix here;

http://www.bitdefender.com/[email protected]

[usil]

Does anyone know if there is a way to fix the files ruined by this virus?

[Welshjim]

usil--I think the scanners in my post #5 above are supposed to do that. See the "How to Recover from Infection" section near the end.

[usil]

Welshjim, I don't think those scanners can fixed files such a doc xls ppt etc. Those are the kind of files I am talking about. The scanners probably just get rid of the virus itself.

[liam858]

AFAIK, the virus will destroy the files, so make sure your defences are up, and if it breaches them, start looking for some freeware file recovery apps.


Liam

[Welshjim]

usil--you may be right. MS makes no claim to repair files, only to spot and get rid of the worm. MS also issued this KB article.
http://www.microsoft.com/technet/sec...ry/904420.mspx
So if the scan shows you are clean on Feb. 2 and do not use the PC on Feb. 3, you should be OK.
Most antivirus programs claim to spot/stop this worm if you get the latest updates.

[usil]

AFAIK, the virus will destroy the files, so make sure your defences are up, and if it breaches them, start looking for some freeware file recovery apps.


Liam

When you say destroy, you mean erased? So regular recover apps should be able to recover them (hopefully)?

[Tuttle]

No, it overwrites the content and leaves the directory entry intact. Recovery would be incredibly difficult, and would probably only find partial contents.

[usil]

So it would be pointless to go to someone and waste time trying to recover. Good to know. Lots of time saved.

[SpywareDr]

Microsoft's Windows Live Safety Center Beta Web site provides the ability to choose “Protection Scan” to ensure that systems are free of infection.
http://safety.live.com/

Microsoft's Windows OneCare Live Beta, (English only), provides detection for and protection against the Mywife malware and its known variants.
http://www.windowsonecare.com/