Kama Sutra Worm
Verizon Online is warning its customers about a mass-mailing worm, W32.Blackmal.E@mm, that presents a medium-high threat risk to computer users. The worm spreads from the infected computer to other computers by obtaining e-mail addresses found on the infected machine.
The e-mail that carries the W32.Blackmal.E@mm payload disguises itself as an e-mail containing an attachment with pornographic content. The subject lines differ but are normally adult in nature. When executed, the worm tries to close any firewall, anti-virus software or similar security programs. The worm also is programmed to delete certain files, named with the following extensions, on the third day of every month: DOC, XLS, MDB, MDE, PPT, PPS, ZIP, RAR, PDF, PSD and DMP. The worm has been nicknamed the Kama Sutra worm for its pornographic content.