Another "Wiggly" warning

[susieq]

Saw this"wiggly" warning, in my travels on my interstate return to Weblamp, and thought this info should be passed on.
New worm variant spreads
Christine Nuzum
NOVEMBER 01, 2004 
 
AT least one new variant of a worm spread rapidly from Asia and Europe to US computers over the weekend, filling up people's email accounts, but otherwise causing little apparent damage.

Alex Shipp, senior antivirus technologist at the email filtering company MessageLabs, said the variant of the so-called Bagle worm was "comparable in size to MyDoom," the virus that slowed Google and other internet search sites in January. MessageLabs recently had received about 900,000 emails containing the virus. Ship estimates that MessageLabs receives about 1 per cent of the emails containing a given virus or worm.
"We were seeing 165,000 an hour, but it's leveled off at 100,000 an hour, if you can call that leveling off," Mr Shipp said.

Because multiple emails containing a worm or virus are often sent to one computer, it's difficult to estimate the number of affected users, said Mr Shipp.

One software security company, McAfee, said another variant of the Bagle worm was also quickly spreading Friday (US time), but similarly did not seem to be destroying files or damaging software.

Both versions can be transferred through shared network files as well as through email.

They attach themselves to files and then send themselves to email addresses that they find on infected machines. Viruses or worms often use email addresses from computers they infect to fool the recipients into opening an attachment.

If a recipient opens the attachment, the worm creates a so-called back-door, "a small program that sits on your machine quietly listening for someone to contact it," said Kevin Hogan, senior manager of security response at Symantec. A computer user who contacts the backdoor can transfer files between his machine and the infected one, Mr Hogan said. The worm variants can also disable security software, experts said.

"It's pretty much a vanilla mass-mailing worm," said Mr Hogan. "It does a lot of the things that we've seen these sorts of worms do in the past."

McAfee first received reports of the worm variants from Europe. Symantec said the first complaints it fielded were from Japan. Antivirus providers received a rash of reports of a worm in the United States at the start of the workday Friday.

Symantec, McAFee and Computer Associates International's eTrust division had received no reports Friday of disabled files or other damage.

Much of the standard security software can readily detect and protect against these latest variants of the Bagle worm, which spreads through shared network files as well as email messages, experts said.

"Most of the major antivirus vendors already have detection and so does Computer Associates," said Stefana Ribaudo, product manager for consumer products at Computer Associates' security division. "Users are receiving the latest signature files from their vendors, which will keep them protected."

McAfee said computer users who don't subscribe to antivirus software can go to its website download a remedy, called "Stinger," that will detect and remove the worm.

The Associated Press

Courtesy of:
http://australianit.news.com.au/articles/0,7204,11249790%5E15343%5E%5Enbv%5E15306%2D15318,00.html