Jump to content

ThaWild

Members
 Profil anzeigen  Aktivitäten des Benutzers anzeigen

  • Gesamte Inhalte

    373

  • Registriert seit

  • Letzter Besuch

 Inhaltstyp 

Beiträge erstellt von ThaWild

  2. W32/Mydoom.f@MM

    in Off Topic

    Geschrieben

    :shock: und wieder ein Mutant unter uns :shock:

     

    A variant of the original Mydoom virus, W32/Mydoom.f@MM is a Medium Risk mass-mailing worm that can open up hacker backdoors on infected systems and launch denial-of-service attacks that target http://www.microsoft.com and http://www.riaa.com domains.

    Note: Unlike previous versions of Mydoom, Mydoom.f can also delete image, movie, Excel and Word files on an infected machine.

    Like other mass-mailing viruses, W32/Mydoom.f@MM steals email addresses from an infected machine, then mails itself to other computers, often spoofing the "from field." The worm arrives with random subject lines, such as "Please read," "Something for you" or "Please reply". The body of the e-mail contains an executable file often disguised as a text file.

    Caution: An infected email can come from addresses you recognize.

    What to look for:

     

    From: Randomly generated

    Subject: Varies. Examples include:

     

    * Announcement

    * ApprovedNews

    * Attention

    * automatic responder

    * Bug

     

    Body: Varies. Examples include:

     

    * Check the attached document.

    * Details are in the attached document. You need Microsoft Office to open it.

    * Greetings

    * Here is the document.

    * Here it is

    * I have your password :)

     

    Attachment: Varies [.cmd, .bat, .exe, .pif, .cmd, .scr] but often arrives in a ZIP archive. 34,686 bytes. Examples include:

    creditcard.bat, creditcard.zip, paypal.zip, photo.zip, textfile.zip

     

    quelle: http://www.mcafee.com

     

    Greez

    Stefan

  8. Achtung: Neue Würmer !

    in Off Topic

    Geschrieben

    W32/Bagle.b@MM is a Medium Risk mass-mailing worm with a potentially dangerous remote access component that may open a backdoor on an infected computer to hackers. Similar to last month's outbreak, W32/Bagle.b@MM arrives as an executable attachment inside an email. When run, the virus emails itself to addresses it steals from the infected computer, spoofing the "from: field" with one of the harvested addresses.

    If the date is Feb. 25, 2004 or later, the worm simply exits and does not attempt to spread.

    Caution: An infected email can come from addresses you recognize.

    What to look for:

     

    From: address may be forged

    Subject ID (random string)... thanks

    Attachment: Varies but contains a .exe extension

    Body: Yours ID (random string) -- Thank

    Aliases: W32.Aula@mm, W32/Tanx.A-mm

     

    NOTE: The virus does not mass-mail itself to addresses that contain:

    # @hotmail.com

    # @msn.com

    # @microsoft

    # @avp

     

    W32/Netsky.b@MM is a Medium Risk mass-mailing worm that copies itself to folders named "share" or "sharing" on the infected system. It spreads itself to addresses it steals, spoofing or forging the "from: field" or using the address skynet@skynet.de. The worm also tries to deactivate the W32/Mydoom.a@MM and W32/Mydoom.b@MM viruses on the host computer.

    Caution: An infected email can come from addresses you recognize.

    What to look for:

     

    Subject/Body: Varies. Examples include:

    -I have your password!

    -about me

    -anything ok?

    -do you?

    -from the chatter

    Attachment: Varies but may have a double-extension such as .rtf.pif contained in a .ZIP file.

    Aliases: Moodown.B, I-Worm.Moodown.b

     

    Up-to-date McAfee VirusScan users with DAT 4325 are protected from this threat.

     

    Quelle: http://www.mcafee.com

     

    Greez Stefan

  18. DER Tag heute!

    in Off Topic

    Geschrieben

    Nicht nur bei euch hats Probleme gegeben ;)

     

    Freitag der 13. bei Microsoft

    Teile des Source Codes von Windows NT und 2000 im Internet aufgetaucht - Microsoft bestätigt – Weitreichende Sicherheitsprobleme befürchtet

     

    Wie Microsoft in einer Stellungnahme bestätigt sind Teile des Windows Source Codes im Internet und in Online Tauschbörsen aufgetaucht, konkret soll es sich dabei um Stücke aus Windows NT und 2000 handeln.

     

     

    http://derstandard.at/standard.asp?ressort=Microsoft

×
×
  • Neu erstellen...