Friday, July 17, 2009

New Virus "Southpark.exe" comes to German

Computer Associates warns of Lovebugs successor

There is a life after ILOVEYOU - but this hardly looks pleasing from. The virus expert from c a now warn against a new worm, called South Park. He is not related to the Lovebugs worm and spreads through Outlook on all PCs with Windows 9x, 2000 or NT to run.

Unlike LoveLetter he need not activated Windows Scripting Host. He is tricky, mostly because subject line and body of the mail in the German language are held. The Subject is "Hey old man!" In the body text is the message "Here is the game that you absolutely wanted to read !;-)". Attached is a file called "South Park.exe".

The worm is, according to CA in no way associated with the Pretty Park worm, which a few weeks ago, drove his mischief (ZDNet reported). Written is the new Visual Basic virus in 5th If the file is opened, they are initially sent by mail to all persons involved in the contacts of the infected computer is stored.

In the background, they copied itself to the file "winguard.exe" and embed itself on the hard disk, from where they launch the next time the PC becomes active. Then the worm creates a file called "Swapfile.vxd", for so long with garbage data is filled up the hard drive is overflowing.

As always advise the virus experts about the e-mail to delete unread. CA offers a free Personal Edition of antivirus software "Inoculate" under www.antivirus.ca.com/ ... for free download, which, according to the company against South Park wappnet.

No comments: