PCs that are not protected by the latest security updates can be infected by a new variant of the Netsky worm without any email attachments being opened.
According to security experts, Netsky.V spreads via email with subjects such as ‘Converting message. Please wait…’ and ‘Please wait while loading failed message…’ but has no attachments.
Netsky.V exploits bugs in Microsoft’s software, meaning net users can be infected just by reading an email. The worm copies itself to the Windows folder as KasperskyAVEng.exe and adds the registry entry HKLMSoftwareMicrosoftWindowsCurrentVersionRunKasperskyAVEng = KasperskyAVEng.exe.
By creating this entry, Netsky.V ensures it is run every time Windows is started and sends itself to the addresses it has collected from the infected computer, using it own SMTP engine.
Graham Cluley, senior technology consultant for Sophos, said:
“Home users are especially vulnerable to this kind of attack as their computers are often not properly protected with a personal firewall or the latest anti-virus updates.”
Be very much on the lookout for this new variant.
Headsup to Dexter for being beady-eyed and getting this noticed fast.
Source: Web User
Articles RSS