Nyxem.E E-mail Worm

F-Secure upgraded Nyxem.E to Radar level 2 due to the increased number of reports.

The worm’s destructive payload activates on every third day of the month by replacing the content of user’s files with a text string “DATA Error [47 0F 94 93 F4 K5]”. Among these files are: doc, xls, mdb, mde, ppt, pps, zip, rar, pdf, psd and dmp.

Detailed Information for Nyxem.E

UPDATE: Please see Microsoft Security Advisory 904420 and F-Secure 

Author: netweb

#bbPress core committer, contributor & moderator, #WordPress, and #BuddyPress Build Tools component maintainer. You can find me on WordPress Slack as @netweb, Twitter as @netweb, GitHub as @ntwb. View all posts by netweb