Friday, February 17, 2006

I-Worm.Blackmal.F@mm

Blackmal F, I-Worm.Blackmal.F@mm, also known as the Kama Sutra or Blackmal Worm, or Nyxem or MyWife, is a worm written in Visual Basic that spreads via both e-mail (using its own SMTP engine) and network shares. It schedules itself to run fifty-nine minutes after the hour it was first executed at and overwrites files on the third day of each month. Blackmal uses Winzip's icon, and contains buggy code. As well, it connects to a web site with a counter to constantly update the number of infected computers in the wild.