Actueel nieuws

14-12-2004  Zafi.D-virus wordt verspreid als kerstgroet

Het Zafi.D-virus wordt verspreid via e-mail, voorzien van een bijlage. Het e-mailbericht is een kerstgroet die in diverse talen is geschreven. De e-mail is geschreven in Engels, Italiaans, Spaans, Russisch, Zweeds en andere talen. Er is ook een e-mailbericht in de Nederlandse taal is geschreven.

verder lezen

12-12-2004  WORM_MASLAN.A (High Risk)

WORM_MASLAN.A is a memory-resident worm that spreads via email, and typically arrives in an attachment called "PlayGirls2.exe. The worm harvests target recipients from certain files found in the system. It also exploits the Remote Procedure Call (RPC) Distributed Component Object Model (DCOM) vulnerability, possibly to aid in its propagation. In addition, this worm has backdoor functionalities that allow remote users to gain virtual control over the infected system. It terminates certain processes associated with antivirus applications, lowering security on the affected system. It also performs denial of service (DoS) attacks on certain Web sites. This worm runs on Windows 95, 98, ME, NT, 2000, and XP.

verder lezen

04-12-2004  WORM_MUGLY.A (Low Risk)

WORM_MUGLY.A is a non-destructive mass-mailing worm that arrives via email, as an attachment. This memory-resident worm searches the infected system for target email addresses in files with certain extension names. However, it avoids sending email messages to email addresses that contain specific strings, most of which are related to antivirus and security companies. It runs on Windows 95, 98, ME, NT, 2000, and XP.

verder lezen

20-11-2004  WORM_SOBER.I. (Medium Risk )

As of November 19, 2004 (GMT -8:00 Pacific Standard Time), TrendLabs has declared a Medium Risk Virus Alert to control the spread of WORM_SOBER.I. TrendLabs has received numerous infection reports indicating that this malware is spreading in France, Germany, and Australia.

verder lezen

20-11-2004  Arafat Worm - WORM_GOLTEN.A (Low Risk)

WORM_GOLTEN.A is a memory-resident network worm. It has no mass-mailing capabilities, but may have been mass-mailed to specific email addresses instead. The email message contains two .EMF file attachments: one shows the burial of Palestinian leader Yasser Arafat and the other contains code that exploits a Microsoft XP vulnerability. The worm propagates via network shares and attempts to connect to network shared folders. It uses a list of user names and passwords to gain access to a machines, to establish a network connection and execute a copy of itself in the accessed network share. This worm runs on Windows 2000 and XP, and is currently spreading in-the-wild.

verder lezen

Volgende