ORANGE VIRUS ALERT Over 30 countries already affected by the

11/3/2005. - Four of the five Mitglieder Trojans registered up until now, FK, FL, FM and FN, are among the 6 most frequently detected threats worldwide, according to data collected by Panda ActiveScan
- The Bagle.FN worm sends the Mitglieder.FK Trojan, which has caused a significant number of infections over the last few hours, from the systems it affects, resulting in a new association of threats to increase the rate of propagation.
- TruPreventTM Technologies block all these Mitglieder Trojans without the need for prior updates, so systems with these technologies installed have been protected from the moment that each of these malicious codes appeared

The avalanche of Mitglieder Trojans continues: over thirty countries are now affected by the different variants of this threat. Four of the five variants (FK, FL, FM and FN) are among the 6 threats most frequently detected by Panda Software’s online antivirus solution, Panda ActiveScan. What’s more, PandaLabs has confirmed that the Bagle.FN worm has teamed up with the Mitglieder.FK Trojan, which it sends from the computers it infects in order to increase its rate of propagation.

This worm spreads by sending itself as a file attached to an email to all the address it finds on the affected computer. Its main actions consist of leaving the computer unprotected and trying to download a file that has the characteristics to generate emails to which to send copies of Mitglieder.FK.

Even though new variants of Mitglieder have been released, their function is very similar: Trojans that install themselves on computers and, in the case of the FK, FL and FN variants, try to download files from a remote website, which could open the door to other threats. The main actions of the FM variant are to disable the antivirus protection installed on the computer, block access to web pages, mainly those belonging to IT security companies, and prevent users from modifying the Registry, so that these actions cannot be undone.

“Without a doubt, the main trick of these variants is their extremely high rate of propagation, via both manual spamming and through the collaboration of the Bagle worms, which is not a new characteristic of this family,” explains Luis Corrons, director of PandaLabs. “One of the hardest hit by these waves of threats could be companies, whose mail could be saturated with emails carrying these Trojans. For this reason, we recommend activating all types of filters to block this threat, especially in corporate environments.”

TruPreventTM proactive detection technologies from Panda Software block these Trojans without the need for prior updates, so systems with these technologies installed have been protected from the moment that each of these malicious codes appeared. More information about TruPreventTM Technologies at http://www.pandasoftware.com/truprevent

For further information about these and other computer threats, visit Panda Software´s Encyclopedia.

About PandaLabs
Since 1990, PandaLabs’ mission has been to analyze new threats as soon as possible to ensure that our clients are safe. Several teams specialized in each specific type of malware (viruses, worms, Trojans, spyware, phishing, spam, etc.) work 24x7 to offer global coverage. To do this they are supported by TruPrevent™ Technologies, a truly global early warning system made up of sensors that are strategically distributed and neutralize new threats and send them to PandaLabs for in-depth analysis. According to AV-Test.org, PandaLabs is the fastest in the industry to offer complete updates (more information at www.pandasoftware.com/pandalabs.asp).

Oxygen3 24h-365d
by Panda Software

2005-11-05 14:59

Back

IT News: