European firms hit by potent new virus

Four European companies have lost data in an attack from a new HTML virus, it emerged on Friday evening.

Linda Leung in Silicon Valley

Four European companies have lost data in an attack from a new HTML virus, it emerged on Friday evening.

According to an alert from Spanish antivirus developer Panda Software, the worm, called Little Davinia, spreads via the internet and potentially wipes out all files on hard disks and network drives.

Advertisement

However, other antivirus companies said they have seen no samples of the virus and none of their customers had been affected.

Panda said the virus began spreading from a "very large ISP" in Spain, which it refused to name. It also declined to name the four companies attacked. Panda initially alerted the ISP to the virus and has worked to remove it from the provider's systems.

Patrick Hinojosa, general manager at Panda, said the virus is potentially more dangerous than the Loveletter bug which caused worldwide havoc last year, because this time users only have to open emails to be infected rather than having to open attachments. The HTML virus code is spread via email messages with no text in the subject box.

The virus affects Microsoft Word 2000 users and is an HTML, VBS email and macro worm programmed in Spain by a virus writer using the signature Onel 2, according to Panda. The author of the Loveletter virus used the name Onel de Guzman.

Little Davinia is triggered when a user involuntarily downloads a document from the internet which opens automatically. This file, which is saved as littledavinia.vbs in the Windows System directory, sends an email message to all entries in a user's address book.

In the text body, the virus inserts the HTML code and connects the user to the web page that acts as a focal point for the spreading of the worm.

Once the Windows registry has been modified in the victim's computer, the virus searches all accessible hard disks, network drives and directories for any files and overwrites them with an HTML code that continuously displays an error window.

On Friday evening US time, a spokesman for fellow antivirus company Symantec confirmed that the worm is currently a "zoo virus", which means it is not yet out in the wild, while a spokesman for McAfee said none of its European customers have been infected.

This morning, UK-based antivirus company Sophos said it had not received any samples of the virus despite repeatedly emailing Panda Software.

Graham Cluley, Sophos senior technology consultant, said Panda is a member of the REVs(Rapid Exchange for Virus Samples) group, which shares samples of new viruses in order to speed up the process of identification and protection. But despite calls for further information, Panda had so far not co-operated.

"They have broken all the rules of Revs and gone ahead and issued a press release about a virus without sharing samples with other antivirus companies," he said.

"Panda seems to have disappeared from the face of the earth," he added. "My message to them is to work with the industry. Most antivirus companies, even arch enemies, work together to protect their customers."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Panda punished over virus warning fiasco

Antivirus company Panda Software has been suspended from an industry group for withholding information about a new virus it claimed was 'more deadly than the Love Bug'.

Anger at 'overblown' virus warning

Antivirus experts have accused rival vendor Panda Software of 'scaremongering' after it warned of the spread of a virus more deadly than the Love Bug.

Websites warned over first hypertext virus

A potential threat to ecommerce sites has been identified with the discovery of the first virus using the hypertext preprocessor (PHP) scripting language.

Security 2000 - the year in review

The year 2000 highlighted the need for business to better co-ordinate internet security - as global losses due to network downtime looked likely to top the trillion dollar mark, according to research.

Related whitepapers

Related jobs

Most watched

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

a padlock

Microsoft to plug security holes

Microsoft has given advance warning of a number of security...

Nokia handset

Top 10 articles, 10 July 09

No Nokia Android phone, ActiveX attacks and Google enters into...

Can Google beat Microsoft at its own game?

Google's announcement this week that it plans to step into...

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Primary Navigation