The Nopir-B worm is making the rounds and deleting music files.
The worm has been rated as “very high” for system risk, but low in terms of network and spread risk. Nopir-B spreads via P2P networks and deletes files with the extension .mp3 or .com. The virus does not always attack other system files (“It may modify registery value to prevent execution of Control Panel, tools that are related to registery, and Task Manager”), but the impact may be enough to prevent systems from rebooting (since the “ntdetect.com” file gets deleted in the worm’s attack). According to AhnLab chief researcher Kang Sung-eun, “Nopir-B worm has yet to make its way to Korea. But computer users should keep tabs on it due to its disturbing damage.”
This one will make conspiracy theorists go nutty. -KF
Source: GEEK.com
Articles RSS