NOW READ THIS
("Security Advisory")
Submitted by: Bill Hickey
NCVA List Master
NRT-0352 Storm Worm Evolution Continues:
New versions of Storm worm are more streamlined and stable after malware authors
removed certain functions, according to researchers from Symantec. The worm no
longer infects other legitimate drivers on the system, intead relying on its own
proprietary components to "do its dirty work." It also no longer injects itself
into processes such as Explorer.exe, according to a blog post by Symantec security
researcher Thomas Parsons. "The sustained development of the Storm worm
(incorporating review cycles) indicates that we will continue to see solid infection
rates going foward," wrote Parsons.
(www.zdnet.com.au 05NOV07)