I received this from my college tech dept and thought others at PP.O should be aware of it. Please disregard the campus information, the removal tool can be downloaded from Symantic. I would advise keeping it on a separate disk.
Over the last week, "Blackworm" has infected more then 700,000 systems across the Internet. This worm is different and more serious then other worms for a number of reasons. In particular, it will overwrite a user's files on February 3rd (and the 3rd of every month, if not removed).
In order to protect yourself from data loss on February 3rd, you should use current (Jan 23rd or later) anti-virus signatures. If you use a campus owned computer or are a student using the campus version of Symantec AntiVirus, you should go to Start Menu Ã¢â‚¬â€œ> Programs -> Symantec Client Security -> Symantec AntiVirus. Once Symantec opens, click on the LiveUpdate button and proceed to download and install the latest version of anti-virus signatures. This should prevent your computer from becoming infected. If you use a different anti-virus program, please make sure you download and install the most recent signatures for that program.
The following file types will be overwritten by the virus: DOC, XLS, MDE, MDB, PPT, PPS, RAR, PDF, PSD, DMP, ZIP.
How would I get infected?
The worm spreads via e-mail attachments or file shares. Once a system in your network is infected, it will try to infect all shared file systems it has access to. You may see a new "zip file" icon on your desktop.
What will BlackWorm do to my system?
It will disable most anti virus products and delete them. The worm will e-mail itself using a variety of extensions and file names. It will add itself to the list of auto-start programs in your registry.
We have download SymantecÃ¢â‚¬â„¢s removal tool. It is located on the P: drive under P:\!CNS\AntiVirus\Blackworm\. However, there are two important reasons to rebuild "from scratch":
1. BlackWorm uses the same tricks to install itself as other viruses/worms. It may not be the only one on your system. Antivirus will not detect all viruses, and the removal tool will only remove this specific worm.
2. BlackWorm will allow remote access to your system, and additional malware may have been installed via this backdoor.
Campus Network Services