Home About Us Products Support Downloads Resellers Links

Inter Engineering and F-Secure, leaders in the combat against computer viruses, warn computer users about the new worm named Palyh (also known as Mankx/Sobig.B).
The worm first appeared on 18 May and has gone worldwide in one day with a still increasing number of reported infections.
Palyh is a massmailer e-mail worm which also spreads through Windows network shares.
It sends out email messages with an infected attachment, pretending to come from support@microsoft.com
The user has to click on the attachment to become infected.
Palyh collects email addresses from several files on the infected machines hard disk and makes a direct connection to the default SMTP server to send out infected messages.
The Worm creates several types of messages

These are the different versions of the e-mails:

From:
support@microsoft.com

Subject:
Re: My application
Re: Movie
Cool screensaver
Screensaver
Re: My details
Your password
Re: Approved (Ref: 3394-65467)
Approved (Ref: 38446-263)
Your details

Message Body:
All information is in the attached file.

Attached file name:
your_details.pif
ref-394755.pif
approved.pif
password.pif
doc_details.pif
screen_temp.pif
screen_doc.pif
movie28.pif
application.pif

Palyh downloads and executes files from four websites and is thus capable of upgrading itself. It is programmed to stop spreading on the 31th of May 2003, but the downloading of files will continue, leaving all options for future activity open.

Users are advised to keep their Anti Virus software enabled and updated. F-Secure Anti-Virus detects Palyh worm with the updates published on May 19th, 2003.

About Inter Engineering

Inter Engineering is one of the few companies specialized in Data Security. Since 1992 the company is active in the protection against computer viruses and has since then extended its activities with strong cryptography, access control, copy protection, biometrics and data recovery. The Company cooperates closely with leading providers globally and contributes actively to research and development. Also close relationships with scientific organizations are maintained. Thus Inter Engineering is able to provide consultancy and solutions for almost any Data Security issue.

To contact us: Inter Engineering
P.O. Box 1626
410 02 Larissa, Greece
Tel. +30.2410.670030
Fax. +30.2410.670006
Email: sales@inter.gr

This message comes from Inter Engineering. You have shown interest in our activities. If you know someone else who would like to receive these messages, please send an email to sales@inter.gr with as subject "Add to mailing list" and in the body the email address of this person.
If you no longer want to receive these messages, just reply with as subject "Remove from mailing list"