Worm blocks access to The Register
The Gunsan is a mass-mailing worm which infects local drives and network shares. On infected machines, it opens a backdoor that allows a cracker to control the computer using IRC.
Gunsan has spread modestly since its discovery late last month. It deletes files needed by antivirus and firewall products (including all files that contain mcafee, softice, numega, antivirus, anti-virus, win32dasm, sophos, catsclaw, claw95, lockdown, symantec, firewall, virusscan, virus-scan, fprot, f-prot, zone labs, or atguard in their path). Gunsan only affects Windows PCs and can cause system instability by deleting important system files.
[ Read more ]