
<A HREF="http://news.zdnet.com/2100-1009_22-6175775.html?tag=nl.e589">A new variant of the Storm Worm</A> (aka Snow Worm) is slamming into email inboxes worldwide as an apparent patch or fix for a recent worm attack.
The latest variant appears to ride on the coattails of worm that Trend Micro calls Nuwar.AOP. The Trojan part of this worm is known as Small (Kaspersky and Trend Micro), Downloader (McAfee), Peacomm (Symantec), and officially by the designation CME (Common Malware Enumeration) 711.
According to Ken Dunham of iDefense, this new variant worm includes anti-security measures to hinder analysis, and sends out copies of itself inside of a password protected ZIP file to evade antivirus detection. Unfortunately, to further evade detection the emails sent are randomized with different filenames, different passwords, and different binaries within the ZIP file.