Home » Blog, Security

CME-24 could cause you problems

Subscribe to Matt McGuire Subscribe | Post Date Calendar1 Feb 2006 | One Comment

The F-Secure blog is reporting that they’ve already received reports that it’s hit some users already. As the activation is based on the computer’s clock, if you’re clock’s not set correctly, then this could hit you anytime.

F-Secure have released a free tool to disinfect any machines that may be infected, this can be downloaded here. It’s recommended that if you’re not a 100% sure that you are not infected, then download the tool and run it.

When Blackworm/Nyxem.E activates it will overwrite all of the following file types:

DOC
XLS
PPT
ZIP
RAR
PDF
MDB

This will not only affect the drives in your PC, it will affect drives mounted on your machine, in lamen’s terms anything at all with a drive letter, network drives, USB drives, MP3 players, etc, etc.


Related Articles:

Share and Enjoy:
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks

One Comment »

  • CME-24 not a big deal | Technology Chief said:

    [...] It looks like CME-24 was not a very big deal after all.  We took an extra cautionary backup of the files that could have been infected.  We also manually scanned the network for traces of the worm and none were found.  We did find one occurance of the worm on our Exchange server, but NAV was able to stop it.  All is well today.  [...]

Leave your response!

Comments on technologychief.com are DoFollow, and use KeywordLuv. Simply enter your name @ your keywords for your website, and the link to your site will use those keywords as anchor text, which is a great SEO bonus on a DoFollow blog. For example, I would enter Matt @ Technology News, and my name in the comments would appear as Matt from Technology News, with the website URL anchored by my top keywords. :)

Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

Be nice. Keep it clean. Stay on topic. No spam.

You can use these tags:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.

CommentLuv Enabled

This site uses KeywordLuv. Enter YourName@YourKeywords in the Name field to take advantage.