New Worm

Hi

A new worm is out and about. win32.Palyh.A@mm

An email supposedly from suuport@microsoft.com - there are various subjects but all have the .pif

As it seems to be from M$ it would be very easy for anyone to think it is safe. Just thought I would advise before any damage can be done.

Hopefully it is not spreading tooooooooo rapidly thus my reason to post this topic as soon as I knew about this.

 

i know that the anti-trojan tool, BOClean has it covered, as the update notification was waiting for me in my mailbox this a.m.

see this post for more...



mark

 

lots of AVs have started releasing new defs for this worm. the quick reaction from the various companies is encouraging, in my view.

i know that Symantec (Norton Antivirus) released a "rare" LiveUpdate yesterday that covered this new worm. as NAV users know, LUs usually only arrive once a week on wednesdays, with daily defs being available via NAV's IU (Intelligent Updater). LUs on a sunday are exceptional.

Symantec refers to this new Palyh worm by another name, and you can read about it here .

so far i know that McAfee, Sophos, KAV and Trend have released new definitions for Palyh.



mark

 

AVG also has and update.

I just got it a short time ago.

BB

 

Running AVG....... Got hit with it 4 times this morning. It snapped up each and every one of them. I sent out a polite note however, to the person that obviously HADN'T updated theirs.

Daizy

 

Help! I have just got this virus but I duno if its been caught or not.

My Zonealarm log reported that it had been quarantined, and that ZA had changed the .PIF to .ZLO.

The .PIF is in the quarantined part of my ZA as I have seen it there, can it do any harm there or not?

 

You're fine Geordie
Zonealarm snatched one of mine as well. If ever in doubt...run the repair tool.

 

miniB - you posted

For future reference, Microsoft DOES NOT do this sort of notification so any posts like this are bogus and either a hoax or a critter.