Saturday, July 11, 2009

BotNet Worm Could Wipe Data on Infected Computers

A report on Cnet indicates that the botnet that attacked the United States and South Korea last weekend harnesses a worm that was scheduled to be activated this Friday, July 11th, to wipe data from infected computers that are estimated to number 50,000 worldwide with the w32.dozer malware infection. Currently, there appears to be no data deletion on infected PCs but experts say that it is too early and that the malware has the potential to be turned on/activated remotely by the malware authors, one botnet expert predicted, unless there is a bug in the program.

Symantec expertise reports that the malware can also be set to destroy the master boot record leaving a computer inoperable and unable to boot to the operating system. The botnets are spreading several different malware, including MyDoom, through emails, according to several experts. A dropper program called W32.Dozer with other malware compenents is sent by W32.Mytob!gen to e-mail addresses on effected PCs and if a user executes the attachment, W32.Dozer drops Trojan.Dozer and W32.Mydoom.A@mm on the operating system.

The installed malware has the ability to update itself and execute as it wishes according to commands that are controlled by the malware authors.

PC Virus Doctors' urge computer users to make sure all anti-viruses, spyware and adware programs are updated and scanned at minimum twice per week as these lethal software programs are lurking in the wild. If anyone needs assistant then please contact PC Virus Doctors for Dallas virus removal.

No comments: