|
UK and International
Business Portal
|
|
|
|
|
||||||
|
||||||||
|
Platinax Internet >> Platinax Internet News
« Leadership and sales | Main | Housing boom: officially over? » November 22, 2004Self-healing worm on rampageSeurity observers have noted a disturbing new worm that's been doing the rounds. Known as the Sober Worm, it can apparently fix sections of itself, should parts of its code become damaged. For example, when installing itself on a user machine, it will run from two main files - and if one is missing, the other file will recreate the other. This is a tactic seen before in Spyware, but not yet in network/mass mailing Worms. This is an especial problem, because a Symantec bulletin posted a report that there were a number of corrupted versions of the e-mail worm in distribution - and that virus guards would not be able to recognise the Sober Worm while it was in its inactive form. The Worm also tries to facillitate infection by creating false negatives with e-mail attachment scanners, claiming that infected attachments are actually clean on infection. The current variant is actually "Sober L", the original form of which originally appeared in Germany in November 2003.
Posted by brian_turner at November 22, 2004 02:51 PM | Discuss this in the Business, Marketing & Search forumsTrackback PingsTrackBack URL for this entry: Comments |
SearchNews Archives:
Monthly ArchivesRecent Entries
For comprehensive internet |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
All content © Copyright 2004 Brian Turner. All rights reserved. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
