Monday, January 23, 2006

Nyxem.e widespread?

This worm definitely has a problematic payload and with over 600.000 infections worldwide now the effect could be bad. The worm's destructive payload activates on every third day of the month by replacing the content of user's files with a text string "DATA Error [47 0F 94 93 F4 K5]". Among these files are: DOC, XLS, MDB, MDE, PPT, PPS, ZIP, RAR, PDF, PSD and DMP. The worm also has an interesting feature: it increases a counter on a website every time a new machine gets infected. The status in Belgium and the Netherlands seems to be quite stable at this moment with not too much infections yet but this could change.Will we see more problematic viruses like this one in the near future?