Anti Rootkit

http://AntiRootkit.Net

Entries Tagged ‘Worm’

Storm Worm Blogspot.com

love.exe

Leave a Comment

IM-Worm, George W. Bush

It’s a later news that a new worm is spreading via MSN messenger since May.5. It sends out the message about the animation of Bush in Spanish,such as “mira esta animacion de bush :P”, and a file “bush.exe” will be downloaded from a link. These links seem to have been closed now. AV vendors have [...]

Leave a Comment

IRC-Worm.Win32.Agent.a

summer2008.zip
We just received a new worm spreading via MSN from a friend. The file name is “summer2008.zip”. In the zip file, it contains a .scr file “summer2008.scr”. This worm also can send out different messages with multiple languages. It also adds the Chinese language pronunciation this time. Kaspersky detects it as Backdoor.Win32.IRCBot.acd (old name: IRC-Worm.Win32.Agent.a)
This [...]

Leave a Comment

Email-Worm.Win32.Sober.aa

Worm.Win32.Sober.aa
We received some spams about a variant of Email-Worm.Win32.Sober today. It spreads via English and German spams. Everyone should be careful.
The English spams are as the following:
From: Webmaster@microsoft.com
Subject: Error in your eMail
Body:
Your eMail has occurred an unknown error on our Server. Please read your mail and check the text.
The full email is attached!
。auto mailerdaemon X.Path [...]

Leave a Comment

More Zhelatin.h Worm

Since we received first Email-Worm.Win32.Zhelatin.h on Jan.28,we have received many variants of Email-Worm.Win32.Zhelatin.h these two days.The author of this worm updates the worm frequently to prevent itself to be detected by AV vendors.We advise everyone should keep your antivirus database to the latest.
As the time of writing,we have received eight different MD5 hashes samples:
adf5fb96b97d8e822e22abe0cbcac0e8
475dc6856f7cf9f2f3ff8bdbed422ee9
272d76a5c8d3a389eef9d8b08ee17dc2
4029a8a3578e6b89f4b558ebb653f8d3
3d61373eb65719e693fae9e8eff8074d
58f790b4eb55dfdb50ca2046d88520e3
cc47d58edfd4004259e34e36355df5b5
6ba2b09befde2a20a5e0212e76d8e2ed
Size: 50,634 [...]

Leave a Comment

Storm worm new variant

Since last Friday,a new worm(aka trojan spam) began spreading all over the world. Most of AV vendors had declared an alert for this worm. And lots of variants of this worm have been found this week.
Today we receive a new variant of this worm.It also spread as the attachment via email.The size of new variant [...]

Leave a Comment

  
  • Categories

  • Meta

  • Sponsors