«

"Security analysts are warning computer users about a new and potentially
destructive Internet worm that can obliterate important documents. The
worm, called Kama Sutra, is making the rounds now, but is scheduled to
execute its first massive attack on February 3.

Detected last week, the malicious worm targets computers running Windows and
spreads primarily by copying itself to shared network locations and then
sending itself to e-mail addresses found on afflicted computers. With
subject lines that read "the best videoclip ever," "give me a kiss," and
"school girl fantasies gone bad," the worm entices computer users to open
the attached file. "

http://www.cio-today.com/news/Expert...d=12100465ZLIH

Imhotep

See http://blogs.technet.com/antimalware...2006/1/26.aspx and
http://isc.sans.org/diary.php?storyid=1067
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org

Imhotep wrote:
> "Security analysts are warning computer users about a new and potentially
> destructive Internet worm that can obliterate important documents. The
> worm, called Kama Sutra, is making the rounds now, but is scheduled to
> execute its first massive attack on February 3.
>
> Detected last week, the malicious worm targets computers running Windows
> and spreads primarily by copying itself to shared network locations and
> then sending itself to e-mail addresses found on afflicted computers. With
> subject lines that read "the best videoclip ever," "give me a kiss," and
> "school girl fantasies gone bad," the worm entices computer users to open
> the attached file. "
>
> http://www.cio-today.com/news/Expert...d=12100465ZLIH
>
> Imhotep

On Thu, 26 Jan 2006 23:30:56 -0500, Imhotep wrote:

> "Security analysts are warning computer users about a new and potentially
> destructive Internet worm that can obliterate important documents. The
> worm, called Kama Sutra, is making the rounds now, but is scheduled to
> execute its first massive attack on February 3.

How does it know it's obliterating "important documents" as opposed to
mundane, expendable documents?

> Detected last week, the malicious worm targets computers running Windows and
> spreads primarily by copying itself to shared network locations and then
> sending itself to e-mail addresses found on afflicted computers. With
> subject lines that read "the best videoclip ever," "give me a kiss," and
> "school girl fantasies gone bad," the worm entices computer users to open
> the attached file. "

Do people really open files with subject lines that?

JTJersey wrote:

> On Thu, 26 Jan 2006 23:30:56 -0500, Imhotep wrote:
>
>> "Security analysts are warning computer users about a new and potentially
>> destructive Internet worm that can obliterate important documents. The
>> worm, called Kama Sutra, is making the rounds now, but is scheduled to
>> execute its first massive attack on February 3.
>
> How does it know it's obliterating "important documents" as opposed to
> mundane, expendable documents?

Not sure...

>> Detected last week, the malicious worm targets computers running Windows
>> and spreads primarily by copying itself to shared network locations and
>> then sending itself to e-mail addresses found on afflicted computers.
>> With subject lines that read "the best videoclip ever," "give me a kiss,"
>> and "school girl fantasies gone bad," the worm entices computer users to
>> open the attached file. "
>
> Do people really open files with subject lines that?

Yes, there are really stupid people out there......

Imhotep

This site gives a little more information:
http://www.pcdoctor-guide.com/wordpress/?p=2237

It states: "The overwriting part is the nastiest aspect of the
payload - on the third day of each month it will overwrite the
contents of Microsoft Word, PowerPoint and Excel files, Adobe PDF
documents and ZIP and RAR compressed files (the complete list of files
affected are DOC, XLS, MDB, MDE, PPT, PPS, ZIP, RAR, PDF, PSD and DMP
extension)."