xmas_worm
xmas_worm

Worm offers seasonal greeting with a catch

Don't be fooled by promise of a 'Happy New Year'

Written by John Geralds in Silicon Valley

An email bearing New Year greetings also contains a malicious worm that is spreading in Europe and the US, according to experts.

Computer Associates (CA) International has assigned a 'medium-to-high' risk to Reeezak, also known as W32/Reeezak.A@mm, W32/Zacker.C@mm and W32.Maldal.C@mm, which masquerades as a Macromedia Flash holiday greeting.

"Holiday themed threats, such as Reeezak, remind us that computer users should never let their guard down when using the internet. Be on the lookout for suspicious messages as they may be bearing gifts that you don't want," said Ian Hameroff, director of antivirus solutions at CA.

Vendors should make sure that users are aware of the virus and update customers' antivirus software, Hameroff said.

Reeezak arrives as an email with the subject line 'Happy New Year' and the message body text 'Hii, I can't describe my feelings but all i can say is Happy New Year :) bye'. The attachment reads 'Christmas.exe'.

The worm, which infects Windows-based systems, uses Microsoft Outlook and MSN Messenger to collect email addresses. It also deletes the Windows System Directory, disables antivirus software and has the ability to disable selective keys on an infected user's keyboard. Reeezak may also spread across networks with open network shares.

In a virus alert posted on its website, Symantec said the worm also tries to spread using the mIRC (Internet Relay Chat) application or through shared folders, and modifies the Internet Explorer start page to a malicious homepage.

Symantec and McAfee have rated Reeezak as a 'low' risk. The worm first appeared in the UK and other parts of Europe and was then detected in the US.

Tags:

Further reading

Sircam worms its way to number one

Email virus officially the major villain of the year   More...

BugWatch: Preying on emotions

Are virus writers lowering themselves to new depths?   More...

Gokar worm hits the web

Mass mailing virus tries to deactivate antivirus software   More...

Related articles

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

08 Jul 2008

3.67 MBSafe browsing, voice recognition and cyber-criminals More...

07 Jul 2008

2.76 MBLaptops on holiday, gaming in Vietnam and 'unbreakable' encryption More...

04 Jul 2008

5.51 MBPodcast Special: Views from the Valley More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Firefox

Firefox users shown to be safer

Internet Explorer users the worst of the bunch   More...

Internet Corporation for Assigned Names and Numbers

Icann downplays recent site hacks

Redirects were 'limited', says organisation   More...

Advertisement

DNA

Boffins build artificial DNA

Could be used in the ultimate computer   More...

Microsoft

Microsoft outlines appeal against EU fine

Two sides back in court   More...

Advertisement