Next time you get an email with a subject line 'screen saver', carrying an attachment, apply caution! An email worm named 'Conycspa.p' is spreading with the help of spammed mails that promise you a screen saver, say Security Experts at MicroWorld Technologies.

Once a victim of this malware campaign downloads the attachment named 'web.exe' and tries to run it, Conycspa.p gets activated. The Worm comes with downloader Trojan capabilities as it tries to logon to many websites and bring in a couple of Trojans, Adwares and Porn Dialers.

For its spreading routine, it harvests email addresses by searching for DBX files and sends the malicious attachment to all stolen addresses. It smartly avoids email ids that contain strings like 'webmaster' and 'support.'

"At a time when malware writers are piggybacking on vulnerability exploits to sneak into computers and do all harm, the author of this worm comes from a rather old school of thought," points out Govind Rammurthy, CEO of MicroWorld Technologies. "He relies on exploiting the human vulnerability of impulsive curiosity. And the fact these kinds of worms are still managing to get some victims stresses on the need for better user education in email handling."

According to Govind Rammurthy, another important aspect of many present day malware is to work in a two-tiered fashion, like in this case. Though an otherwise simpler variety, Conycspa's aim is to ultimately bring in more malicious code into the computer, which would play out later as its author wishes.

MicroWorld's AntiVirus, AntiSpam and Content Security software 'eScan' provides proactive protection for its users from this worm, and all other kinds of malware. Powered by MWL technology, eScan performs Virus scanning at the Winsock layer and hence there's no need of taking the object to the application level for checking its contents.

For Mail Servers, MicroWorld provides advanced protection with its software 'MailScan' which blocks Viruses and Worms from entering the email infrastructure of organizations.

If infected with the Conycspa Worm, non-users of MicroWorld products can download and run the free MWAV toolkit from MicroWorld Technologies to clean their computers.
It can be downloaded at, http://www.mwti.net/products/mwav/mwav.asp

 

MicroWorld

MicroWorld Technologies (www.mwti.net) is the developer of the world's most advanced AntiVirus, Content Security and Firewall software eScan, MailScan, and eConceal. MicroWorld Winsock Layer (MWL) is the revolutionary technology that powers most of MicroWorld products enabling them to achieve several certifications and awards by some of the most prestigious testing bodies, notable among them being Virus Bulletin, Checkmark, TUCOWS, Red Hat Ready and Novell Ready.

To learn more, kindly visit http://www.mwti.net.

From