Intelligence Note

Prepared by the Internet Crime Complaint Center (IC3)

February 2, 2006

Blackworm

Blackworm is a mass-mailing worm which degrades security software and destroys certain types of files. The worm is also known as: CME-24, Kapser.A, KillAV.GR, Grew.A, Nyxem.E, MyWife.d, Small.KI, Tearec.A, and Blackmal.E. Blackworm will destroy files on infected systems on the 3rd day of every month beginning February 3, 2006. Blackworm is detected and removed by up-to-date anti-virus software.

An overview of this worm can be found at http://www.lurhq.com/blackworm.html. If you do not have up-to-date anti-virus software installed on your system then you can use one of the following removal tools: