Any info abou Nyxem.E?

[JLCarneiro]

Does someone know if avast! can detect this worm? It's known as:

• Nyxem.E
• Blackmal
• Kama Sutra

Here are some info about it on some sites:

• F-Secure
• C|Net News
• K7Computing

[TAP]

avast! detects this worm as Win32:VB-xx [Wrm]. 

http://www.avast.com/eng/vps_history.html

I think Alwil team should write up some info about this worm to make it clear.

[elodie]

Because of naming confusion between anti virus vendors, a CME number has been assigned for this worm : CME-24.

This is a list of the names used by the anti virus vendors, related to this worm :
http://blogs.securiteam.com/index.php/archives/242
or
http://cme.mitre.org/data/list.html#24

You should find more information with this

 

[DavidR]

That looks like a very useful resource elodie, thanks for the link, shame it doesn't inclide avast in its CMElist of AVs.

Welcome to the forums.

[elodie]

That looks like a very useful resource elodie, thanks for the link[...]
Welcome to the forums.

Thank you DavidR

shame it doesn't inclide avast in its CMElist of AVs.

My understanding is that Avast didn't write up a description of this worm.
Perhaps it could explain that they don't appear on the CME website 

[DavidR]

I was thinking/hoping that perhaps it would include all aliases like Virus Bulletin's VGREP (which you have to be a registered user) even if they don't have a write up.

[petersonan]

Will Avast detect Nyxem?  What can be done to check for Nyxem and how can it be disinfected?

[DavidR]

It does but there is a different virus name, Win32:VB-xx [Wrm].

A forum search for Nyxem should return more information as it has been discussed very recently http://forum.avast.com/index.php?topic=18792.0. Not to mention reading this threads first reply.

If avast detects it it should be able to disinfect it as you say. If you are looking for manual instructions then a google search might help with more detailed information that that given here

[Winter]

Thanks for the info. Just wanted to ensure I was protected against this one! Good info! 

[DavidR]

Welcome to the forums

Common sense and practicing safe hex will help protect against this and many other viruses of this type, delivered by infected email attachment.

If you don't go opening unknown unexpected email attachments you have little to fear  as the initial infection comes via an infected email attachment. So resist the temptation no matter how attractive or curious you might be and survive a first day/unknown virus that would otherwise pass your defenses.

Never open an attachment from the email, save it to you HDD and scan using a multi engine scanner such as Jotti - Multi engine on-line virus scanner.
Safer still delete unknown emails with attachments and to contact the sender if you know them and ask did they send it and what is it about.

[dmshiff]

I am happy to see this, but I wonder why searching this site for "Kama Sutra", "blackmal", and "Blackworm" failed to find this entry, which already contains all of these words.  I spent 30 minutes trying to find OTHER information about this worm, thinking that I had been unprotected all along.  Does your internal search just not look here? 

[DavidR]

Not knowing how you searched, what terms you used I couldn't comment.

However, I did a search for Kama Sutra (no quotes) and it returned 7 hits, this thread was the 4th in the list.