also @ TechSpot: Razer brings the arcade experience home with the Atrox Arcade Stick

Porn worm disables security tools

By Derek Sooman

On January 19, 2006, 4:29 PM

Security gurus are issuing dire warnings about the dangers of unsolicited emails claiming to contain obscene pictures and sex movies. Why? Because they apparently contain the Nyxem-D worm (which also goes by the names Email-Worm.Win32.VB.bi and W32.Blackmal.E@mm.) This malware attempts to harvest other email addresses from infected machines, and utilises its own SMTP engine. The e-mails in question have the following features:

Subjects: *Hot Movie*, Arab sex DSC-00465.jpg, Fw: SeX.mpg, Fw: Sexy, Fwd: Crazy illegal Sex!

Text body: F**kin Kama Sutra pics, Note: forwarded message attached. You Must View This Videoclip!.

Attachment: Adults_9,zip.sCR, Photos,zip.sCR, SeX,zip.scR, Sex.mim.

The worm alters the Windows registry to disable security applications, and makes sure that it runs on start-up. It also attempts to delete certain files related to security tools which it may find on the system. Our advice as always is to keep your anti-virus software up to date, and to never download and open attachments from untrusted sources. You should delete e-mails that you don’t expect to receive without opening them.

No tags on this story

User Comments: 18

Got something to say? Post a comment
  1. [quote]The worm alters the Windows registry to disable security applications, and makes sure that it runs on start-up[/[quote]i guess start-up is probably always the perfect time for virus to do whatever it was meant to do...well moreso "mal-ware", that way you don't really notice your computer is going just a tiny bit slower...hm...not a bad idea though....
  2. Most viruses will run on start up anyway. Just check your msconfig and look under the Startup tab and you'll see it there.Pretty funny though how it can remove the security - metaphorically, ya end up getting screwed.I guess if you wanna look up porn...use google images lol
  3. If people are stupid enough to click on an email that advertises free Arab porn, then they get what they deserve. Who is that desperate to accept porn that is sent to them? Get off your lazy ass and go to a site to download it!
  4. People do make mistakes, but if you click on this, then I don't know what to say. Maybe some people are really desperate for porn, but clicking on an email with an attachment that you didn't even expect to get? I really don't think that is too smart. I can't believe this is even a threat because there is actually people that open these things. Oh well, hopefully everyone can learn from their mistakes.
  5. LMAO @ Dell & l33t. You know, the bottom line is, you shouldn't be looking up porn on the net anyway, so if you get caught, I think you deserve it!!!!!!! lol, so with that being said, does anyone know what the latest update is? lol.
  6. What Dell is really trying to say is 'Please feel free to visit these sites directly'.Just a note: A worm (or malware) does NOT have to show up in your MSCONFIG start-up tab to run at start-up!
  7. Why do people do this to other people's computers? People have to learn not to click on suspicious e-mails and not have people remind them.
  8. To bad none of us are dumb enough to get a worm like this lol. Really, why would a hot 20 year old go for any of us lol.
  9. The lack of sympathy is almost a consensus. It is really hard to get a worm such as this. First, a person has to have the audacity to open up a "free porn" e-mail. Then that person has to download it, with the description of a free porn "vidoe clip." That's two big hurdles to surmount. If a person does both, it is really difficult to have any sympathy. Especially with the fake porn e-mails highly publicized in the recent years, it is practically basic knowledge to not open any suspicious e-mails, much less downloading the attachment. If someone gets this Nyxem-D worm, then he/she can only learn this mistake the hard way.
  10. HAHA! i have the solution!!!! don't look up porn.......
  11. [b]Originally posted by Race:[/b][quote]Just a note: A worm (or malware) does NOT have to show up in your MSCONFIG start-up tab to run at start-up![/quote]U may want to check ur registry at HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun, that's where those malwares usually hide themselves beside in MSCONFIG start-up tab. Be careful before u delete anything though, do it at ur own risk.
  12. This thing is getting out of hand. If they targeting the security software then what will people use?. I think its high time to actively hunt these people down. Governments move far to slowly and because of weak laws cannot guarantee these people will be prosecuted.
  13. Due to the open nature of the Internet, this is hard to fight.
  14. Looks like a nasty one, too bad when you got one.Eventually we'll end up, with better and safer operating systems.Therefor hackers must exist.On the other hand, ($ome) big companies should take more care of their (paying) customers.I think people with a bit of common sense,would delete them unopened.Otherwise it's a risk and you know it.Furtheron,sex is our origin. through sex we exist.Nothing else, sorry.Time for gouvernments and high folks,to acknowledge THAT, quite wining andstop putting their heads in the sand.
  15. why click on a message that has .jpg or .mpg as a title? Who can be so dumb?
  16. My endusers. There are still endusers who will click on em. All you can do is lock them down. Dorks!
  17. I deal with people that do not understand what a "right-click" is, a desktop, a task bar; they have no concept of Windows or how things work... These same people will, when told to restart the computer, turn the monitor off and on rather than what they refer to as the "hard drive" or "modem". We have had a couple day-0 virus issues due to the ignorance of our users... and that is what these people prey upon... those that are ignorant of the tools they use.
  18. Unfortunately, it isn’t common sense for the computer illiterate to immediately delete suspicious e-mails with attachments. Perhaps e-mail software and services should implement strategies to cut down on the risk of these threats spreading. They could issue a warning message that displays before all suspicious e-mails are opened that forces the user to type in a sentence that says they understand what they’ve just read and wish to continue. This feature could be disabled of course, but would be left on by default. Then again, most of the users would probably still download and run the viruses in the hope of viewing a dirty movie.

Recently commented stories

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.