Symantec warns of a new worm variant

Security experts are alerting Symantec's antivirus software users to update the new version to deal with a new worm variant known as Rinbot or Delbot.

This variant takes advantage of a weakness in Symantec software and establishes botnets from which to launch DOS attacks (denial of service attacks). The virus is spread by tricks to create emails with the worm program attached to email, said Ron O'Brien, security analyst at Sophos.

Symantec updated the virus to the list and released a Daily LiveUpdate version to protect and fight the virus it calls vW32 Rinbot.L. Meanwhile, the virus is named by Sophos (UK) with security code W32 / Delbot-L.

The virus takes advantage of weak passwords to install on machines including Microsoft SQL servers using the Windows API network, such as Message API, O'Brien said. This virus causes registry changes in the infected system. Symantec has easily classified and deleted this virus.

According to O'Brien, the new worm variant was first discovered when trying to destroy CNN servers last Wednesday.

Anh Thu