Feeds

Virus prevents you asking for help

Clever design

  • alert
  • submit to reddit

Website security in corporate America

A virus which blocks victims from reaching antivirus web sites or even emailing for help is spreading around the internet after laying dormant for weeks.

MTX was first identified in August and was thought to pose relatively little risk, but its clever design is now leading to widespread problems.

November statistics from antivirus vendor Sophos will show the virus produced the most calls to its help desk during November, although these figures are skewed by the fact victims had no other means of asking for help.

The virus, which is also known as Apology-B, arrives as an email attachment with a variety of different names designed to entice careful users into opening it including NEW_NAPSTER_site.TXT.pif and the cunningly titled IS_LINUX_GOOD_ENOUGH!.TXT.pif. Opening the attachment triggers an infection.

The virus replaces wsock32.dll with a modified version which monitors network traffic. When the virus detects the user sending an email, it will send another to the same recipient. The message will have no subject or body text, only an attachment.

The virus also has the ability to open up a backdoor on a victim's machine. It places a file, called MTX_.exe, on a victim's hard disc drive which, once executed, tries to connect to a website and download further programs to run.

However the bug's most sinister feature is that a user will be prevented from accessing antivirus website from an infected machine or sending emails to specified security firms.

The bug has one very sinister feature: once it infects a user, it's programmed to stop the victim from visiting antivirus Web sites and sending "mayday" emails to antivirus companies.

Users can be infected by MTX only if they haven't updated their antivirus software for the last two months.

The growing prominence of MTX, and other viruses which have lain dormant for weeks before raising their ugly head, shows that people aren't applying this simply procedure. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
'Windows 9' LEAK: Microsoft's playing catchup with Linux
Multiple desktops and live tiles in restored Start button star in new vids
Not appy with your Chromebook? Well now it can run Android apps
Google offers beta of tricky OS-inside-OS tech
New 'Cosmos' browser surfs the net by TXT alone
No data plan? No WiFi? No worries ... except sluggish download speed
iOS 8 release: WebGL now runs everywhere. Hurrah for 3D graphics!
HTML 5's pretty neat ... when your browser supports it
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
NHS grows a NoSQL backbone and rips out its Oracle Spine
Open source? In the government? Ha ha! What, wait ...?
Google extends app refund window to two hours
You now have 120 minutes to finish that game instead of 15
Intel: Hey, enterprises, drop everything and DO HADOOP
Big Data analytics projected to run on more servers than any other app
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.