The Helsinki, Finland, company issued only 27 Level-2 alerts last year, and two Level-1 warnings, so having four serious worms unleashed close together within the first 10 days of the year is unusual. "The year isn't starting out great," said Fred Fondriest, director of business development for F-Secure. "If this continues, then we're in for a bad one."
Lirva.A and Lirva.B enter computers as file attachments through E-mail, chat rooms, or the Kazaa file-sharing network. The worms are capable of disabling antivirus and security applications and stealing passwords. The latter are sent to an external E-mail address. A fan of Canadian rocker Avril Lavigne, who was nominated this week for five Grammy awards, apparently wrote Lirva, which spells Avril when reversed. When an unsuspecting computer user activates a Lirva worm, it tries to open Lavigne's official Web site.
ExploreZip.E is a variation of the first ExploreZip worm found in June 1999. The latest version arrives through an E-mail attachment, is undetectable by most antivirus programs, and destroys Microsoft Office documents and source-code files. It also will reply to unread E-mails, sending dummy responses with infected attachments.
Sobig, which has infected computers in 10 countries, is capable of installing a "backdoor" on a computer. A backdoor is a piece of code that gives the virus writer control of the infected computer and the ability to steal files.
The best defense against the latest threats is to update your antivirus software. "The hacker community is very active this year," Fondriest said. "Get updated. It's easy."
Stay connected and informed by visiting our Enterprise IT Community!

Become a member today for instant access to free InformationWeek research, expert advice, peer perspectives, and more on the following topics:
- Application Performance Management (APM)
- Security Management
- Mainframe 2.0
- IT Automation
- Service Assurance
Also, visit our Government, Retail and Financial Services groups to see how these technologies apply specifically to those industries.
NOTE: Offer valid for U.S., U.S. possessions, & Canada only.