new email worm starts doing the rounds

  1. 5,609 Posts.
    New email worm starts doing the rounds
    By Online Staff
    May 19 2003

    A new email worm, named Palyh, has starting spreading and gaining ground in the wild, according to an advisory from security firm iDefense.

    The company said the worm came as an email attachment, with the from address being [email protected]

    Anti-virus firm Sophos noted that Microsoft never sent out software by email, so the address generated by this worm were obviously bogus.

    iDefense said the emails had random subjects, some of which were "Re: My application", "Re: Movie", "Cool screensaver", "Screensavers", "Re: My details", "Your password", "Re: Approved (Red. 3394-65467)", "Approved (Ref. 38446-263)", and "Your details".

    It said multiple reports by multiple vendors in a short period of time indicated a successful quick strike seeding of the worm in the wild.



    The worm-bearing emails had a one-line message: "All the information is in the attached file."

    Anti-virus company Symantec said the worm would deactivate on May 31.

    The worm sends itself to addresses found in files with any of the following extensions: wab, dbx, htm, html, eml and txt.

    Another anti-virus firm Computer Associates said on its website that the worm's pervasiveness was high.

arrow-down-2 Created with Sketch. arrow-down-2 Created with Sketch.