Sophos warns over reworked nachi worm

By
Follow google news

Anti-virus firm Sophos is warning PC users to be aware of a new version of the Nachi worm, Nachi.B, which attempts to remove the MyDoom virus and download Microsoft security patches to unprotected computers.

Nachi-B searches for unpatched computers and takes advantage of the same critical security hole in Microsoft Windows that was exploited by the Blaster worm last year.
  
Once located, Sophos says the worm infects the computer without asking the user's permission and hunts for traces of the MyDoom worms.
 
If a MyDoom infection is found, the Nachi-B worm attempts to remove it and download patches to fix the Microsoft vulnerability.
 
Graham Cluley, Sophos' senior technology consultant, said that while the virus author may think he is a modern-day Robin Hood, Nachi.B infects computers without permission, steals system resources and makes changes to a PC's setup and data.
 
He added that the worm can also cause unexpected conflicts on the user's PC.
 

Add iTnews as your trusted source

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

CSIRO finds permanent CISO

CSIRO finds permanent CISO

Unpatched server behind Vic student data breach

Unpatched server behind Vic student data breach

Home Affairs orders gov-wide 'legacy' system stocktake within six months

Home Affairs orders gov-wide 'legacy' system stocktake within six months

Cisco says no workaround for exploited SD-WAN Manager flaw

Cisco says no workaround for exploited SD-WAN Manager flaw

Log In

  |  Forgot your password?