MVP Jubo Security Blog

The Blog

Recent Posts

Tags

News

  • Kim's Journal
    My wife's blog, the "alternative" truth...


    MVPs
    2003 - 2004 - 2005 - 2006 - 2007 - 2008 - 2009


    Jubo





    Locations of visitors to this page

Community

Email Notifications

MVP Sites

Microsoft Links

Blogs

Security Forums

Microsoft Blogs

Archives

Browse by Tags

All Tags » Latest Virus Threats (RSS)
An Online ticket?!?
What a surprise... This morning I was happily working at the office, hhmm... okay, from home..., when Outlook notified me that I had received an email. When I checked it was from an unknown company USA3000 Airlines. When I read the email they even had...
Olympic attachment?
Not only the Olympic games have started, but also the malware games related to the Olympics. One of the latest is that if you receive an attachment named as: "ioc_guidelines_for_persons_accredited_at_the_xxix_olympiad.pdf" then delete this immediately...
Mass Hack Attack
Really cool video at the McAfee's Avert Labs blog site about the latest mass hack attack at phpBB web sites. See how it looks like from an end user's perspective: Mass Hack Attack . Source: McAfee Avert Labs Blog .
Email with subject: "Israel Just Have Started World War III"
Late last night I found a strange email in my email Inbox; from a person I didn't know. It even had an attachment called: "News.exe". I could even save it to my hard drive without any antivirus program jumping up. Decided to submit it to...
McAfee added detection for fake IE7
McAfee has added detection for the fake IE7 email. See their writeup: W32/Grum . You need at least DAT version 4996. So check if your version of McAfee is up-to-date. For Symantec see: W32.Grum.A
Beware of fake IE7 Beta email
There's a email out there, which says that it is coming from admin@microsoft with an attachment called: "IE7.0.exe". The subject of this email is: "Internet Explorer 7 Downloads" and it shows you an image of an IE7 Beta 2 download. Do NOT click on this...
BootMerlin virus
This is a virus written in MS VisualBasic that modifies the C:\Boot.ini file to display a Spanish message at boot time: Upon execution, it can also be displaying a Wizard animation "speaking" in the Spanish language: W32/BootMerlin can make copies of...
Be aware for Valentine Day's e-greetings emails!
If you receive emails with variable subjects such as: " Together You and I , Everyone Needs Someone or Cyber Love , then delete them immediately. They're ususally sent by a female using different names. The attached file that contains the worm is an executable...
Critical 0-Day Internet Explorer Exploit Discovered In The Wild
A lot of web sites are already talking about it. There's a critical 0-day exploit discovered in the wild for Internet Explorer. According to the Microsoft TechNet web site, it's a vulnerability in the Microsoft Windows implementation of Vector...
Microsoft word document spam
McAfee Avert Labs has recently seen spammers start to use Microsoft Word documents and HTML attachments to deliver their advertising payload. By moving the advertising content, most importantly the URL link, into an attached document rather than the body...
Santa IM Worm Installs Rootkit Payload
A new Christmas-themed worm attack is underway, delivering an offensive rootkit payload over the AOL, MSN, Windows Messenger, ICQ and Yahoo instant messaging networks. The worm, identified as IM.GiftCom.All, was discovered by researchers at IMLogic Inc...
Latest Virus Threat: Zafi.D
Zafi.D Aliases: Email-Worm.Win32.Zafi.d Nocard.A@mm W32.Erkez.D@mm W32/Zafi-D W32/Zafi.D.worm W32/Zafi.d@MM Win32.Zafi.D Win32.Zafi.D!ZIP Win32/Zafi.D.Worm WORM_ZAFI.D Zafi.D F-SECURE Zafi.D Description: A new variant of Zafi worm - Zafi.D is spreading...
MyDoom seeks to destroy antivirus firms
Antivirus companies are perplexed by a spate of recent viruses that contain messages in which the writers threaten to attack them. Worm writers are threatening to attack antivirus companies F-Secure, Symantec, Trend Micro and McAfee. In the latest version...
W32/Zafi.b@MM
W32/Zafi.b@MM (McAfee/NAI) Virus Characteristics: This is a mass-mailing worm that constructs messages using its own SMTP engine, spoofing the From: address. It also attempts to propagate via P2P, via copying itself to folders on the local system (containing...
The Korgo Family
W32.Korgo is a worm that spreads via the Internet by exploiting the LSASS vulnerability, as described in Microsoft Security Bulletin MS04-011 , in remote computers. This vulnerability is critical for Windows XP/2000 operating systems that are not properly...