NOPIR Worms !!

[Falcon]

Hi,

I eared about a new kind of worm called nopir which deletes all MP3 files and .com files on a hard disk. Is avast protecting from this kind of worm ?

Bye

[neiby]

Unless Avast refers to it by another name, it does not appear to be listen in the VPS history, which means it likely is NOT protecting against that worm at this time.

[DavidR]

This entirely depends on what the name might be in avast as there is no reference to nopir in the virus database.

You need to check out the various aliases it may have, see VGREP Virus Name search and information. We need VGrep because, without the correct name, it may prove very difficult to access accurate information about a virus and its effects.

There is also no reference to nopir in the above link, so it may be very new and not listed or an incorrect virus name.

[NAMOR]

Are you talking about this one?

http://secunia.com/virus_information/17359/nopir-b/

http://www.sophos.com/virusinfo/analyses/w32nopirb.html

This section helps you to understand how it behaves

W32/Nopir-B is a worm for the Windows platform.

W32/Nopir-B will display an anti-piracy image on the screen when run. The worm will then delete all COM and MP3 files from the computer. The worm will also disable taskmanager, registry tools, and access to the control panel. W32/Nopir-B will also check for debuggers and may attempt to disable any such software that it finds.

W32/Nopir-B copies itself to <Program Files>\Projects Visual Studio.NET\Nctrup.exe, <Program Files>\Restore\<random name>.exe, <Program Files>\eMule\Incoming\AnyDVD 5.1.0.1 Crack+Keygen By Razor.exe.

[Bernie]

Is avast protecting from this kind of worm ?

Yes it does (at least) since a few days! Listed in todays VPS database as -> Win32:P2P-VB-Z [Wrm]