|
|
|
|
|
|||
|
![]() Music Downloads |
August 2006 Select the links for detailed information and removal tools for the latest viruses For
a Superior AntiVirus/Internet Security solution
W32.Hocgaly.A@mm W32.Hocgaly.A@mm
is a mass-mailing worm that gathers email addresses from the compromised
computer. It may also perform a denial of service attack against predetermined
Web sites. Payload:
Performs a denial of service attack against predetermined Web sites. Read
the full Symantec report here
W32.Wargbot W32.Wargbot is a network-aware worm that opens an IRC back door on the compromised computer. It spreads by exploiting the Microsoft Windows Server Service Remote Buffer Overflow Vulnerability (as described in Microsoft Security Bulletin MS06-040). The Trojan may download a copy of Backdoor.Ranky.X. Payload:
Opens a back door on the compromised computer. Listens for commands, which may allow a remote attacker to perform some of the following actions on the compromised computer: Launch denial
of service attacks May receive commands to download a file from [http://]media.pixpond.com/l9rd[REMOVED]. The downloaded file is a copy of Backdoor.Ranky.X, which listens for commands from a remote attacker on a random port and sends the IP address of the compromised computer to a server on the yu.haxx.biz domain. Attempts
to spread by exploiting the Microsoft Windows Server Service Remote Buffer
Overflow Vulnerability (as described in Microsoft Security Bulletin MS06-040)
once it receives the appropriate command. The exploit code affects computers
using the Windows 2000 operating system. Read the full Symantec report here W32.Toyep.A@mm W32.Toyep.A@mm is a mass-mailing worm that downloads other threats onto the compromised computer. Payload:
Downloads a remote file. Read the full Symantec report here W32.Stration.A@mm W32.Stration.A@mm is a mass-mailing worm that gathers email addresses from the compromised computer. Payload:
Sends a copy of itself as an email attachment. Read the full Symantec report here W32.Randex.GEL W32.Randex.GEL is a network-aware worm that opens an IRC back door on the compromised computer. It spreads by exploiting the Microsoft Windows Server Service Remote Buffer Overflow Vulnerability (as described in Microsoft Security Bulletin MS06-040). Read the full Symantec report here W32.Stration.B@mm W32.Stration.B@mm is a mass-mailing worm that gathers email addresses from the compromised computer. Payload:
Sends a copy of itself to email addresses gathered from the compromised
computer and downloads a remote file. Read the full Symantec report here W32.Spybot.AKKC W32.Spybot.AKKC is a network-aware worm that opens a back door on the compromised computer and has distributed denial of service capabilities. The worm spreads to network shares and by exploiting vulnerabilities. Payload:
Opens a back door and performs denial of service attacks. Read the full Symantec report here Trojan.Linkoptimizer Trojan.Linkoptimizer is a detection for a family of Trojan horse programs that use rootkit and stealthing techniques to hide their presence. The Trojan may download and display pop-up advertisements. Read
the full Symantec report here
W32.Stration.C@mm W32.Stration.C@mm is a mass-mailing worm that gathers email addresses from the compromised computer. The worm also downloads files and may lower security settings. Payload:
Gathers email addresses, downloads files, and may lower security settings.
Read the full Symantec report here W32.Womble.A@mm W32.Womble.A@mm is a mass-mailing worm that gathers email addresses from the compromised computer. Read
the full Symantec report here
W32.Spybot.AKNO W32.Spybot.AKNO is a network-aware worm that opens a back door on the compromised computer. It also spreads to network shares protected by weak passwords and by exploiting vulnerabilities. Payload:
Opens a back door and exploits remote vulnerabilities. Read the full Symantec report here W32.Stration.D@mm W32.Stration.D@mm is a mass-mailing worm that gathers email addresses from the compromised computer. The worm also downloads files from remote computers. Payload:
Downloads files on to the compromised computer. Read the full Symantec report here
|
|
©
Copyright 1999 - 2006 The Computer Wizard
|
||||