'NAKEDWIFE' trojan worm strikes

Trend Micro began getting reports of the trojan worm that spreads through e-mail at 8am PST Tuesday, as nine US organisations, including a telecommunications company and a government agency, reported the worm, said Susan Orbuch, a company spokeswoman. The worm is currently in the wild and is rated a "medium" security risk by Trend Micro, she said.

"It would go to a red alert if we went to other regions of the world," Orbuch said. "Right now, we are only getting reports from the US"

McAfee, a division of Network Associates, also reported that 25 corporate clients, including Fortune 500 companies, had identified the trojan worm and the company rated it a "high risk." Computer Associates and Central Command also reported the worm.

The trojan worm is spread through Microsoft Outlook, sending an e-mail to every e-mail address in the infected user's address book, security firms said. The worm is known as NAKEDWIFE, W32/Naked@MM, W32.HLLW.JibJab@mm.

When the trojan is executed, it displays a "Flash" window that states "JibJab loading." While the file loads, the trojan deletes DLL (Dynamic Link Library), INI (initialisation files), EXE (execution files), BMP (picture files) and COM (resource) files in the Windows and system directories, according to Trend Micro. In other words, the worm deletes files used for everyday computer operation, Orbuch said.

The trojan, which was written in VBS (Visual Basic Script), sends out the same mail as an e-mail attachment. The mail has a subject line that reads "FW: Naked Wife." It has a message body that reads "My Wife never look like that :), Best Regards." The attachment is named NakedWife.EXE.

After the e-mail is sent out, the trojan then displays another message.

"You're now (F-----!) (c) 2001 By BGK (Bill Gates Killer)," the message reads, according to Trend Micro.

A bit of "social engineering" is going on with worms like the NakedWife worm, Orbuch said. Some users are intrigued by the title and open it, she said.

"I step back and say 'Why are people opening files that say 'NakedWife'" at work, Orbuch said.

Companies should consider security measures that eliminate EXE and VBS files gaining access to a corporate network, she said. Users also should know they should not open the attachments, she said.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

James Evans

PC World
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?