virus outbreak - W32.Chir.B mass mailing worm

[anushkacp]

Please do not open any mails having attachment with the following names, even if the mail is received from a known contact.

- PP.exe
- *.eml
All such mails need to be permanently deleted using SHIFT-DELETE combination, as they contain a virus.

In addition, please do not open any mails coming from unknown sender.

The details of how the virus gets infected is listed below.

**************************************************

W32/Chir-B is an email worm, an EXE file infector and an HTM/HTML file infector.

The worm component attempts to spread via email by sending itself to email addresses found in the Windows address book, plus addresses found in files matching *.adc, *r.db, *.doc, and *.xls.

The email will have the following characteristics or simillar:

From: <username>@yahoo.com or [email protected]
Subject line: <username> is comming!
Attached file: Name of infected file.

The body of the email will be blank.

 

[chanakacin]

Please do not open any mails having attachment with the following names, even if the mail is received from a known contact.

- PP.exe
- *.eml
All such mails need to be permanently deleted using SHIFT-DELETE combination, as they contain a virus.

In addition, please do not open any mails coming from unknown sender.

The details of how the virus gets infected is listed below.

**************************************************

W32/Chir-B is an email worm, an EXE file infector and an HTM/HTML file infector.

The worm component attempts to spread via email by sending itself to email addresses found in the Windows address book, plus addresses found in files matching *.adc, *r.db, *.doc, and *.xls.

The email will have the following characteristics or simillar:

From: <username>@yahoo.com or [email protected]
Subject line: <username> is comming!
Attached file: Name of infected file.

The body of the email will be blank.

Thanx for the tip

 

[x-pert]

http://support.microsoft.com/kb/327203

Last reviewed: March 22, 2007


SUMMARY
W32.Chir.B@mm is a network-aware, mass-mailing worm. It is also a file-infector virus. W32.Chir.B@mm is a variant of W32.Chir@mm. W32.Chir.B@mm uses its own Simple Mail Transfer Protocol (SMTP) engine to send itself to all of the e-mail addresses that it finds in the Windows Address Book (.wab file), and in .adc, r.db, .doc, and .xls files.

 

[isharackp]

thanx...

 

[ik_vanq88]

thx for sharing

 

[hul2000]

Thanks for the info.

 

[Novindu]

hmmmm viruses from mail attachments wont harm u unless u dload it and open it....
1ST dont dload any office attachments fron unknown senders + any attachment below 1 MB from an unknows sender(specially FW mails)
and
then even if a mail sent to u by a known person be cautious when u open a small attachment below 1MB... what u gotta do is use common sence and try ta guess what it is
and the other thin is most come as an rar file and inside it contains an .exe file.. if u see that just delete it....unless u click on dat exe da virus wont affect you...
so just be care full dats all u gotta do
cheerz guys

 

[Novindu]

hmmmm viruses from mail attachments wont harm u unless u dload it and open it....
1ST dont dload any office attachments fron unknown senders + any attachment below 1 MB from an unknows sender(specially FW mails)
and
then even if a mail sent to u by a known person be cautious when u open a small attachment below 1MB... what u gotta do is use common sence and try ta guess what it is
and the other thin is most come as an rar file and inside it contains an .exe file.. if u see that just delete it....unless u click on dat exe da virus wont affect you...
so just be care full dats all u gotta do
cheerz guys

 

[x-pert]

hmmmm viruses from mail attachments wont harm u unless u dload it and open it....
1ST dont dload any office attachments fron unknown senders + any attachment below 1 MB from an unknows sender(specially FW mails)
and
then even if a mail sent to u by a known person be cautious when u open a small attachment below 1MB... what u gotta do is use common sence and try ta guess what it is
and the other thin is most come as an rar file and inside it contains an .exe file.. if u see that just delete it....unless u click on dat exe da virus wont affect you...
so just be care full dats all u gotta do
cheerz guys

No machang. That's not always the case.... There are 2 kinds.
1) Virus
2) Worms

Viruses act exactly the way you said. But some worms can execute them selves automatically... They dont need any kind of user interaction to execute its process.

Best thing is to enable a good spam and virus guard in the mail filter software...

If it is a worm.... then the problem is bit complex.... Hmmmm.. But still you have to open atleast the e-mail. Not that particular program. (I guess) So better to delete the e-mail straight away even without opening the e-mail to see what's inside in it...

 

[dinithi017]

thx

 

[Wal Bada]

Thanx for the inf

 

[Anusha]

I suppose using a high security email service like GMail will help a lot too.

 

[icreations]

Thx for tha info machan

 

[virajvithanage]

Thanks for the info machanla!!!

 

[softimageinfo]

good

 

[shalinda]

thxxx for the info