Previous
Mimail.c Worm: Prevention And Cure
News The latest email worm disguises itself as a ZIP file of steamy photos from the beach. The attached filename is photos.zip. Most antivirus software companies have updated their signature files to include this worm.
[November 3, 2003, 8:35]
MyDoom: Prevention And Cure
News The attached files are one of the following: document.zip document.pif doc.scr message.pif readme.exe file.zip message.zip oia.zip text.zip MyDoom (w32.mydoom@mm, also known as Novarg, Shimgapi, Shimg, and MiMail.r) takes advantage of the...
[January 28, 2004, 9:05]
Antivirus Software Decrypts Bagle Attachments
News Recent versions of the Bagle worm have bypassed corporate gateway security because they are distributed in password-protected Zip files, which are next to impossible for antivirus programs to scan. Emails infected with the Bagle worm, however...
[March 4, 2004, 16:50]
Bagle Worm Spawns Five Siblings
News Graham Cluley, senior technology consultant for antivirus company Sophos, said: "However good an ISP, Web email account or antivirus gateway product may be at scanning email, it will be useless at detecting the worm inside the encrypted Zip file.
[March 1, 2004, 12:45]
Help & HowTo: Sobig.e Worm
News Since ZIP files are ignored by most extension-blocking rules within email clients, you should not attempt to open this file. Upon execution, the worm will search for saved files with these extensions looking for email addresses embedded within:
[June 26, 2003, 10:20]
Bagle Turns To Anti-spam Trick
News Within days, antivirus companies updated their products to look for the password and decrypt the Zip file, but the Bagle author has now released these three new versions of the worm that produce the password in the form of a graphic or picture...
[March 15, 2004, 13:05]
Dumaru Worm Comes Sniffing Again
News Such systems often block .exe files, but usually allow .zip files through. It comes with an attachment called myphoto.zip, which contains an executable file. This worm, which is the latest version of the Dumaru virus, was first detected on Friday.
[January 26, 2004, 15:50]
W32/Cervivec@MM
White Papers This worm arrives as a zip file attached to an email, named WORMS.ZIP. Inside the ZIP files is an executable named WORMS.EXE. When run, the worm adds a new value "Kernel Loader" to the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows...
[May 2, 2004, 1:03]
'Private Photos' Worm Could Launch DoS Attack
News Schmugar said one of the more unusual aspects of the worm -- which McAfee classified as a "moderate" threat -- was its use of a Zip file, which could prove to have longer legs than the .exe files most worms try to spread.
[November 3, 2003, 8:15]
Worm Hits Corporate Networks Hard
News While first noticed in Israel on Sunday, the worm -- also known as TROJ_EXPLORE.ZIP and I-Worm.ZippedFiles -- struck hardest in the United States on Thursday, shutting down several major companies for hours and deleting critical files.
[June 14, 1999, 8:36]
New Virus Creates Shockwaves
News Furthermore, the virus also changes the filenames of all JPG and ZIP files and then moves the files to the C:\ root directory. Experts say the worm is travelling faster than the speed of light to a computer near you.
[December 1, 2000, 8:41]
Babylonia Virus Loses Its Home Page
News This doesn't do the damage of a worm.explorer.zip, for example, but we're still worried," Symantec researcher Eric Chien said. The second piece modifies the virus to display a message on boot-up; the third turns the virus into a worm that spreads...
[December 9, 1999, 9:59]
Brad Pitt Virus Targets Microsoft
News However, the emails contain a .zip file that contains the worm. Hackers have released a self-spreading worm, called Ahker-F, that promises pornographic movie clips of the celebrities. If opened, the worm spreads to the users email contacts...
[March 31, 2005, 15:10]
Update: Shockwave Warning Puts UK Firms On Virus Alert
News Once executed, the worm tries to cause maximum nuisance for users by changing the names of JPEG and ZIP files and moving them to the directory C:\. Antivirus vendors in the UK are advising companies to be on alert this morning after receiving...
[December 1, 2000, 9:59]
MyDoom Hits Music Industry
News The MyDoom.F virus spreads using a variety of subject lines and message text, usually attaching itself to the message as a Zip compressed file. A later worm, Doomjuice, spread to computers that were already infected by MyDoom and dropped copies of...
[February 23, 2004, 7:10]
Yeah, Yeah, LOOK!, Bewerbung, And More Virus Variants
News Overwrites *.ZIP and *.RAR files instead of *.JPG and *.JPEG file. Body: This is the Killer for VBS.LOVE-LETTER.WORM. Hides *.PAS and *.ASM files instead of *.MP3 and *.MP2 It does not download the password stealing trojan.
[May 10, 2000, 8:44]
Bagle Uses Outlook Flaw To Speed Replication
News To fool antivirus software, the next batch of Bagles was sent with the infected attachment hidden inside an encrypted Zip file, with the password to open the file contained in the email's text. Users no longer have to click on an attachment to...
[March 18, 2004, 11:55]
MyDoom Spreading Again
News By now a lot of companies are already blocking dodgy zip files and quite a few of the infected e-mails are automatically blocked as spam. Another variant of the MyDoom worm, which spreads by sending copies of itself using its own SMTP engine and...
[February 17, 2005, 8:05]
MessageLabs: Watch Out For Audio And Video Spam
News According to MessageLabs, spammers have recently been experimenting with different types of file attachments, including text, image, HTML, ZIP, RAR, RTF and PDF file formats. The spam run of 15 million emails lasted 36 hours and used Storm worm...
[October 30, 2007, 14:41]
There's No Worm In Your Apple - Honest
Talkback In the old days, they spread to other machines by floppies, zip disks or file sharing. If it port-scans neighboring machines and tries to burrow through known security holes, it's a worm. Based on these traditional viewpoints, opener is neither a...
[November 1, 2004, 19:07]
