Skip to main content
BBC NEWS / TECHNOLOGY
Graphics VersionBBC Sport Home
News Front Page | Africa | Americas | Asia-Pacific | Europe | Middle East | South Asia | UK | Business | Health | Science & Environment | Technology | Entertainment | Also in the news | Have Your Say |
Friday, 3 February 2006, 07:34 GMT

Computer threat from Nyxem virus

Screengrab of Word and Excel files, BBC Computer security firms are gearing up for the Nyxem virus, which is set to start erasing spreadsheets, Word documents and other files.

Infected PCs will also be used as launch platforms to help the virus seek out fresh victims.

Because the virus is known to be lurking on more than 300,000 PCs, this scanning could generate large amounts of net traffic as it activates.

The Nyxem-E virus has been racking up victims since it emerged on 16 January.

A website associated with the virus has been keeping count of the machines it has managed to infect and now this counter stands at more than 300,000 victims.

Unlike many other recent Windows viruses, Nyxem-E has been built to delete many popular types of file. Security firms suggest it was written to target businesses because many of the file types it deletes, spreadsheets and presentations, are more common in firms than homes.

However, because many companies have good security systems in place home users are more likely to be caught out. The virus only affects Windows users who must open an infected attachment on an e-mail message to fall victim.

NYXEM FILE TARGETS


The creators of the virus have tried to trick people into opening the attachments by falsely claiming they contain a variety of pornographic images or videos.

Security firm Lurhq has analysed the data sent to the website counting victims and found that most are in Peru, Turkey and India. Many other nations are reporting infected machines too.

Some unlucky users have already fallen victim to Nyxem-E because the clock on their machine is set to the wrong time.

When the virus strikes it will also start scanning local computer networks for other machines to infect. This could cause problems for some users as the data generated swamps net links.

UK net service firm Easynet has started telling customers if they are using an infected computer and urging them to clean it up and remove the bug.

Security firms said users needed to be vigilant but not panic because many other Windows viruses have been far more successful at infecting machines but have not caused significant problems for the net.

Despite the furore over Nyxem-E, Microsoft said it was not planning to update its malicious software removal tools before the date that the virus is set to strike.

Instead, the next version of the tool which is due to be released on 14 February will spot and remove the worm if it finds it on a PC.

In an advisory Microsoft said users should not open unusual attachments from unfamiliar sources.

Nyxem-E is also known as Nyxem-D, Blackworm, MyWife, Kama Sutra, Grew and CME-24 virus.




E-mail this to a friend
Related to this story:
Countdown for nasty Windows virus (30 Jan 06 |  Technology )
Close e-crime 'doors' firms told (25 Jan 06 |  North East Wales )
New year brings fresh security fears (27 Jan 06 |  Technology )
PC viruses hit 20 year milestone (20 Jan 06 |  Technology )
Zombie PCs target vulnerable sites (19 Jan 06 |  Technology )
Microsoft rushes out Windows fix (06 Jan 06 |  Technology )

RELATED INTERNET LINKS:
A guide to computer viruses
How to protect yourself against viruses
Internet Storm Center on Nyxem
Lurhq
Lurhq on Nyxem statistics
Easynet
Microsoft advisory on Nyxem-E
The BBC is not responsible for the content of external internet sites



SEARCH BBC NEWS: 

News Front Page | Africa | Americas | Asia-Pacific | Europe | Middle East | South Asia | UK | Business | Health | Science & Environment | Technology | Entertainment | Also in the news | Have Your Say |

NewsWatch | Notes | Contact us | About BBC News | Profiles | History

^ Back to top | BBC Sport Home | BBC Homepage | Contact us | Help | ©