Feeds

Virus prevents you asking for help

Clever design

  • alert
  • submit to reddit

Internet Security Threat Report 2014

A virus which blocks victims from reaching antivirus web sites or even emailing for help is spreading around the internet after laying dormant for weeks.

MTX was first identified in August and was thought to pose relatively little risk, but its clever design is now leading to widespread problems.

November statistics from antivirus vendor Sophos will show the virus produced the most calls to its help desk during November, although these figures are skewed by the fact victims had no other means of asking for help.

The virus, which is also known as Apology-B, arrives as an email attachment with a variety of different names designed to entice careful users into opening it including NEW_NAPSTER_site.TXT.pif and the cunningly titled IS_LINUX_GOOD_ENOUGH!.TXT.pif. Opening the attachment triggers an infection.

The virus replaces wsock32.dll with a modified version which monitors network traffic. When the virus detects the user sending an email, it will send another to the same recipient. The message will have no subject or body text, only an attachment.

The virus also has the ability to open up a backdoor on a victim's machine. It places a file, called MTX_.exe, on a victim's hard disc drive which, once executed, tries to connect to a website and download further programs to run.

However the bug's most sinister feature is that a user will be prevented from accessing antivirus website from an infected machine or sending emails to specified security firms.

The bug has one very sinister feature: once it infects a user, it's programmed to stop the victim from visiting antivirus Web sites and sending "mayday" emails to antivirus companies.

Users can be infected by MTX only if they haven't updated their antivirus software for the last two months.

The growing prominence of MTX, and other viruses which have lain dormant for weeks before raising their ugly head, shows that people aren't applying this simply procedure. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Be real, Apple: In-app goodie grab games AREN'T FREE – EU
Cupertino stands down after Euro legal threats
Download alert: Nearly ALL top 100 Android, iOS paid apps hacked
Attack of the Clones? Yeah, but much, much scarier – report
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
Microsoft: Your Linux Docker containers are now OURS to command
New tool lets admins wrangle Linux apps from Windows
Bada-Bing! Mozilla flips Firefox to YAHOO! for search
Microsoft system will be the default for browser in US until 2020
Facebook, working on Facebook at Work, works on Facebook. At Work
You don't want your cat or drunk pics at the office
Soz, web devs: Google snatches its Wallet off the table
Killing off web service in 3 months... but app-happy bonkers are fine
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
How to simplify SSL certificate management
Simple steps to take control of SSL certificates across the enterprise, and recommendations centralizing certificate management throughout their lifecycle.