New MyWife worm?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View

I received a mail from Sri Lanka (I wrote only *one* letter to this
place, after Boxing Day), which is infected with nyxem.C, according to
Kaspersky's online scanner. Other AVC vendors call it Blueworm,
Blackmal, or MyWife. The descriptions don't exactly fit Blackmal.C, can
it be that this one is a new version?

The sender and subject are different from those give in the
descriptions of the version which circulated in september.

Header is:

Received: from ([]) by
    with smtp id 1DFnFq-0qJguW0; Mon, 28 Mar 2005 07:57:38 +0200
Subject: hi
Date: 28 Mar 2005 12:01:16 +0600
MIME-Version: 1.0
X-TOI-SPAM: u;0;2005-03-28T05:57:57Z
X-TOI-VIRUSSCAN: unchecked
X-TOI-MSGID: 61c82350-d7c8-4c77-8179-a65f99fda218
X-Seen: true
X-Mailer: T-Online eMail 5.00.0035
Content-Type: multipart/mixed; boundary="--NextMimePart"

Inside are two links to external smilie gifs, a "Life.jpg" picture with
a topless woman who has somebody else's hand in her jeans (front side),
and an attachment called download3.pgzip.z

Gabriele Neukam

Ah, Information. A property, too valuable these days, to give it away,
just so, at no cost.

Re: New MyWife worm?

On Mon, 28 Mar 2005 17:11:54 +0200, Gabriele Neukam

Quoted text here. Click to load it

Why don't you send the file to and see if it's
attributes match that of variant descriptions.

Ian Kenefick
If you have a virus:

Site Timeline