Variant of Nuwar/Storm worm. 10 out of 32 detects it

See earlier report on this happynewyear2008.exe where 14 out of 32 will detect a variant of storm worm.

Today, I’ve been deleting email that contains link to download an infected file:
Domain is familypostcards2008.com

stormwormdec30   stormwormlink

Only 10 (at the time of this writing and submission at Virustotal.com) will detect this variant:

stormwormdec30vt

stormwormdec30vtr

See also http://www.antirootkit.com/blog/2007/12/27/happy-new-rootkit/ for other domains that users should block in addition of blocking familypostcards2008.com

Leave a Reply