Feeds

Virus prevents you asking for help

Clever design

  • alert
  • submit to reddit

Choosing a cloud hosting partner with confidence

A virus which blocks victims from reaching antivirus web sites or even emailing for help is spreading around the internet after laying dormant for weeks.

MTX was first identified in August and was thought to pose relatively little risk, but its clever design is now leading to widespread problems.

November statistics from antivirus vendor Sophos will show the virus produced the most calls to its help desk during November, although these figures are skewed by the fact victims had no other means of asking for help.

The virus, which is also known as Apology-B, arrives as an email attachment with a variety of different names designed to entice careful users into opening it including NEW_NAPSTER_site.TXT.pif and the cunningly titled IS_LINUX_GOOD_ENOUGH!.TXT.pif. Opening the attachment triggers an infection.

The virus replaces wsock32.dll with a modified version which monitors network traffic. When the virus detects the user sending an email, it will send another to the same recipient. The message will have no subject or body text, only an attachment.

The virus also has the ability to open up a backdoor on a victim's machine. It places a file, called MTX_.exe, on a victim's hard disc drive which, once executed, tries to connect to a website and download further programs to run.

However the bug's most sinister feature is that a user will be prevented from accessing antivirus website from an infected machine or sending emails to specified security firms.

The bug has one very sinister feature: once it infects a user, it's programmed to stop the victim from visiting antivirus Web sites and sending "mayday" emails to antivirus companies.

Users can be infected by MTX only if they haven't updated their antivirus software for the last two months.

The growing prominence of MTX, and other viruses which have lain dormant for weeks before raising their ugly head, shows that people aren't applying this simply procedure. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
PEAK APPLE: iOS 8 is least popular Cupertino mobile OS in all of HUMAN HISTORY
'Nerd release' finally staggers past 50 per cent adoption
Microsoft to bake Skype into IE, without plugins
Redmond thinks the Object Real-Time Communications API for WebRTC is ready to roll
Microsoft promises Windows 10 will mean two-factor auth for all
Sneak peek at security features Redmond's baking into new OS
Mozilla: Spidermonkey ATE Apple's JavaScriptCore, THRASHED Google V8
Moz man claims the win on rivals' own benchmarks
Yes, Virginia, there IS a W3C HTML5 standard – as of now, that is
You asked for it! You begged for it! Then you gave up! And now it's HERE!
FTDI yanks chip-bricking driver from Windows Update, vows to fight on
Next driver to battle fake chips with 'non-invasive' methods
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
Ubuntu 14.10 tries pulling a Steve Ballmer on cloudy offerings
Oi, Windows, centOS and openSUSE – behave, we're all friends here
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
Simplify SSL certificate management across the enterprise
Simple steps to take control of SSL across the enterprise, and recommendations for a management platform for full visibility and single-point of control for these Certificates.