 | 
02-01-2006
|  | Reminiscing | | Join Date: Apr 2004 Location: watching the snow melt...
Posts: 2,690
| | | Windows users need to check this out fast. nemo just sent me this link and I wanted to make sure that it got posted here. Basically if you're running Windows (and I know that a few of you still are), make sure - no, i mean REALLY make sure - that your AV software is up to date. This looks pretty nasty. http://isc.sans.org/diary.php?storyid=1067
__________________ "Lucky in love, well maybe so. there's still a lot of things you'll never know...
like why each time the sky begins to snow - you cry..." - Dan Fogelberg | 
02-01-2006
|  | ¿42? | | Join Date: Feb 2005 Location: 33.78N 84.66W
Posts: 5,756
| | | Re: Windows users need to check this out fast. Would you believe that I don't have any AV software and never have on any of my machines and I've not had one virus? Sure, I've received 100's via email over the years but I've never executed any of them. I've had a hardware firewall for years now and I see nary a worm. I do think I'm the exception though, all other windows users should keep some kind of AV software running. I get a lot of calls from friends to help them clean their box from the latest bug.
__________________ Clay Editor and Forum Administrator stego anyone?
Add yourself to Hypography's Frappr. "There are only 10 kinds of people in the world -- .....Those who understand binary, and those who don't."
"Draw no conclusions before their time." | 
02-01-2006
|  | Reminiscing | | Join Date: Apr 2004 Location: watching the snow melt...
Posts: 2,690
| | | Blackworm (CME-24) This one looks pretty bad. An excerpt from the SANS site (where the link leads) says the following: Quote:
About BlackWorm
Over the last week, "Blackworm" infected about 300,000 systems based on analysis of logs from the counter web site used by the worm to track itself. This worm is different and more serious than other worms for a number of reasons. In particular, it will overwrite a user's files on February 3rd.
At this point, the worm will be detected by up to date anti virus signatures. In order to protect yourself from data loss on February 3rd, you should use current (Jan 23rd or later) anti virus signatures. Note, however, that the malware attempts to disable/remove any anti-virus software on the system (and does this every hour while the system is up), so if the machine was infected before signatures were deployed, obviously, that anti-virus software can't be expected to clean up the infection for you.
The following file types will be overwritten by the virus: DOC, XLS, MDE, MDB, PPT, PPS, RAR, PDF, PSD, DMP, ZIP. The files are overwritten with an error message( 'DATA Error [47 0F 94 93 F4 K5]').
| It just sounds yucky. I'm glad I'm not subjected to the Evil Empire any longer. 
__________________ "Lucky in love, well maybe so. there's still a lot of things you'll never know...
like why each time the sky begins to snow - you cry..." - Dan Fogelberg | 
02-01-2006
|  | Creating | | Join Date: Dec 2003 Location: Winterpeg, Manitoba
Posts: 1,903
| | | Re: Blackworm (CME-24) It's stuff like this that makes me keep backups.
__________________ Sometimes a Hypography Forum Administrator 
"With a big enough engine, even a brick will fly." -Law of Aerospace | 
02-02-2006
|  | ong RA guru dev RA | | Join Date: Nov 2005 Location: Earth
Posts: 1,134
| | | Re: Windows users need to check this out fast. hmmm... I use the free version of AVG and AVG updates itself daily automatically. Is this program enough to protect me? I was told one time that there is a better free anti-virus program- but I forgot the name of it. Anyone know of any really good AV programs (preferably free)?
__________________ Rofl waffles | 
02-02-2006
|  | Ancora Imparo |  Sponsor | | | | Re: Windows users need to check this out fast. Avast, AntiVir - I have both running on different machines and havent ever had any problems. Good Adware/spyware/malware software is also helpful, they can do some nasty things to.
__________________ Jay-qu
::Hypography Moderator of..
Chemistry, Physics & Mathematics, Astronomy & Cosmology, Space and Technology & gadgets Forums
Einstein said that if quantum mechanics is right, then the world is crazy. Well, Einstein was right. The world is crazy.
-Daniel Greenberger Physics Guides - Physics Resources and help | 
02-02-2006
|  | Thinking | | Join Date: Oct 2005 Location: Malaysia
Posts: 42
| | Re: Windows users need to check this out fast. I received an e-mail two days ago which contained a virus... it might be this one.  This is very, very bad. It's in several local newspapers and everyone is worried about it.
__________________ Silence is the element in which great things fashion themselves. - Carlyle, Sartar Resartus
Last edited by Mercury; 02-02-2006 at 03:06 AM.
|  | |
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | | |
Posting Rules
| You may not post new threads You may not post replies You may not post attachments You may not edit your posts HTML code is Off | | | | » Recent Threads | | | | | | | | | | | | | | | | | | | | | |