Forum Moderators: phranque
I know that new variants of yaha are creeping around, and old favorites like klez and sircam are showing a resurgence. Several "powered by KaZaA" style exploits are also surfacing, using a tactic that tries to deactivate anti-virus software...maybe that's what this current flurry is all about. Symantec says [securityresponse.symantec.com]:
W32.Lirva.A is a mass-mailing worm that also spreads by the IRC, ICQ, KaZaA, and open network shares. This worm attempts to terminate antivirus and firewall products. It also emails the cached Windows 95/98/Me dial-up networking passwords to the virus writer.
New worm, Lirva, is spreading [computerworld.com]
I wondered who I had offended, was getting around 10 a day before Christmas, dropped to around 5 a day this week.
As I put on another thread I put no details in my profile here, at least that stops the number rising. ;)
For the first time I did get an infection a few weeks ago, it was an old virus which had somehow got through the defenses, but was easily removed.
These guys are sick! Why do they do it?
Sobig Virus [eweek.com]