It has been observed that the Black Worm also known as W32.Vb.i or W32.Nayem.E has been actively spreading in India since last two weeks now. It’s a mass-mailing worm that also spread using remote shares. After a long gap there has been an outbreak kind of situation as this worm was successful in spreading all over the globe within few hours when it first appeared over the Internet. The reason why the worm was so successful in spreading all over is just because it spreads by creating a mime encoded compressed executable with a different extension (.HQX, .BHX), which didn’t had any kind of header to classify the file. As a result the mail gateway scanners were not able to decode the attachment and scan the infected files. This is why the worm got skipped even though the mail severs have updated anti-virus scan engines. Many of the leading AntiVirus software’s had to do some changes to their scan engine to make the scanners decode the file and scan for the infected attachment

This worm has a dangerous payload, it will delete all the documents, worksheets, presentations, database files and compressed backup files from the system on every 3rd day of the month. This is very serious payload considering that the worm has spread all over India and the first payload day of 3rd February is arriving very soon. We recommend all our users to have their AntiVirus updated, up and running

Source: http://www.efytimes.com/fullnews.asp?edid=9930&magid=14

Beware of the 'Kama Sutra' Virus:

Microsoft in an e-mail Tuesday warned users to update their antivirus protections against the Kama Sutra worm, the mass-mailing virus slated to begin corrupting files later this week.
In its advisory for the Kama Sutra worm, otherwise known as win32/Mywife.E@mm and Nyxem.E, Microsoft warns users to be wary of opening unknown attachments.
The worm, which infects a user's computer once an attachment is opened, may also spread over writeable network shares if there are blank administrator passwords. Users hit with the worm may find a number of their files permanently corrupted on the third day of every month, beginning this Friday.
Like other worms, the Kama Sutra virus attempts to disable security software that is loaded on users systems, Microsoft warns.
Microsoft is advising users to update their antivirus software, as well as remain cautious when opening unknown attachments and use strong password protection.
Security experts estimate the worm has infected at least 500,000 PCs, often using pornography as its enticement.

Source: http://zdnet.com.au/news/security/soa/Micr...39236008,00.htm