Forum |  HardWare.fr | News | Articles | PC | S'identifier | S'inscrire | Shop Recherche
896 connectés 

  FORUM HardWare.fr
  Windows & Software

  quel est le virus qui arrive avec...

 


 Mot :   Pseudo :  
 
Bas de page
Auteur Sujet :

quel est le virus qui arrive avec...

n°531927
dos2000
Fan d'Alyson...
Posté le 28-01-2002 à 10:59:56  profilanswer
 

.. un sujet "new photos from my party!"
 
salut
cet e-mail commence à nous pourrir notre messagerie d'entreprise
 
norton ne l'a pas détécté, on a été obligé de stopper le serveur de messagerie
 
si qlq1 a des infos, j'ai commencé des recherches mais pff rien pr l'instant
merci
help

mood
Publicité
Posté le 28-01-2002 à 10:59:56  profilanswer
 

n°531942
etch
Posté le 28-01-2002 à 11:09:01  profilanswer
 

Va voir sur le site de symantec ils en parlent.
De plus Symantec a sortie cette nuit une mise à jour des définitions pour les clients qui ont le support Platinum. C'est la version des Déf du 27 janvier : 40127af
 
Il devrait sortir des définitions publics rapidement.

n°531943
dos2000
Fan d'Alyson...
Posté le 28-01-2002 à 11:09:36  profilanswer
 

bon, pour ceux que ca peut intéresser, il s'agit d'un worm, w32.myparty@mm
c'est tjs drôle

n°531949
dos2000
Fan d'Alyson...
Posté le 28-01-2002 à 11:16:32  profilanswer
 

merci etch :)
y'a plus qu'une maj à fiare,"l'ancienne" datait du 23

n°531983
etch
Posté le 28-01-2002 à 11:36:14  profilanswer
 

Voila le lien pour télécharger le fichier du 27 janvier.
Il fait environ 6 Mo.
http://www.symantec.com/avcenter/d [...] 127x86.exe

n°532464
xmulder
un peu plus au nord...
Posté le 28-01-2002 à 17:05:58  profilanswer
 

Virus News. Monday, January 28, 2002
******************************************************************
 
1. Not Everything Starting with 'www' and Ending in '.com' Is a Web Site
2. How to subscribe/unsubscribe
 
****
 
1. Not Everything Starting with 'www' and Ending in '.com' Is a Web Site
    The Internet worm 'Myparty' poses as a Web-site link
 
    Kaspersky Labs, an international data-security software developer,
announces the detection of a new Internet worm going by the name of
Myparty that spreads via e-mail. At this time, several incidents of
infection by this malicious code have already been reported.
 
    The worm appears on a target computer as a file attached to an
e-mail message. The file is a Windows application about 30Kb in length,
it is written in Microsoft Visual C++, and is compressed in a UPX
utility.
 
    An infected message appears as follows: Subject: new photos from my
party! Body: Hello! My party... It was absolutely amazing! I have
attached my web page with new photos! If you can please make color
prints of my photos. Thanks! Attachment: www.myparty.yahoo.com
 
    As is apparent, the file carrier purposely poses as a Web-site
address. A user's trust is taken into account so that when
double-clicking on the enclosure, the said user ends up at some Internet
address. However, what actually occurs is that a malicious program is
activated upon enclosure opening.
 
    "This is definitely a new technique for manipulating a user that is
uniquely employed by 'Myparty' to have already caused a series of
infections. The rest of the program is a classic Internet worm that is
not differentiated from hundreds of similarly created Internet worms,"
commented Denis Zenkin, Head of Corporate Communications for Kaspersky
Labs. "This occurrence once again confirms that not everything beginning
with 'www' and ending in '.com' is a Web site."
 
    If the system date on a computer is 25-29 of January 2002, Myparty
launches its installation and spreading routines. In addition to this,
the worm checks for the presence of Russian-language support and if this
is detected, the worm finishes its operation and exists a system.
 
    In order to maintain its presence in the memory, upon each
infected-computer start-up, the worm creates its copy in different disk
directories and registers them in the Windows system registry of the
program auto-start section.
 
    In order to send its copies via e-mail, the worm scans the Windows
Address Book and DBX (also used in Outlook Express) databases and checks
these with all found addresses. Following this, the worm installs a
direct connection with a remote SMTP server and imperceptibly,
supposedly in the name of the infected computer's user, sends its copies
to these addresses. In order to confirm an infection, the worm also
sends a blank e-mail to the napster@gala.net address.
 
    Myparty has some dangerous side effects. On computers with Windows
NT/2000/XP, the worm installs a spy program for remote unauthorized
control. In this way, a malefactor can gain total control over a
victim's computer.
 
    In addition to this, depending on a number of conditions, Myparty
opens the http://www.disney.com Web site in the current Internet browser
window.
 
    Defense procedures thwarting Myparty have already been added to the
Kaspersky Anti-Virus database.
 
    A more detailed description of this Internet worm can be found in
the Kaspersky Virus Encyclopedia
(http://www.viruslist.com/eng/viruslist.html?id=46966).
 
 
 
**
 
2. How to subscribe/unsubscribe
 
If you would like to subscribe to other Kaspersky Lab news blocks or  
to unsubscribe from this news block, you can do so by visiting
http://www.kaspersky.com/subscribenow.html
 
If you experience any problems with this procedure, please contact us at:
news@kaspersky.com
 
****
 
Best of Luck,
 
Kaspersky Lab News Agent
 
-----
10 Geroyev Panfilovtcev St., Moscow, 123363, Russia
Telephone./Facsimile: +7 (095) 948 43 31
WWW: http://www.kaspersky.com, http://www.viruslist.com
FTP: ftp://ftp.kasperskylab.ru
E-mail: info@avp.ru


---------------
1km = 1024m

Aller à :
Ajouter une réponse
  FORUM HardWare.fr
  Windows & Software

  quel est le virus qui arrive avec...

 

Sujets relatifs
Virus Badtrans... et Kernel32.exeNero me trouve un virus!!!!!!!!!!!!!! Au secour!!!!!!!!!!!!!!!!!!!!!!!
tiens c'est con ce qui m'arrive...Virus qui deplace les icones du bureau, qq connait ?
[VIRUS] ... il me détruit apparemment tous les fichiers .VXDj'arrive pas a virer ce p.... de virus !!!
j'arrive pas à me debarasser du virus win32.cihj'arrive pas a metre a jour NORTON ANTI VIRUS?????
Virus W32.Nimda.enc.: comment arrive t il ??j ai virus tres special !!!!! HELP j arrive pas a le localiser
Plus de sujets relatifs à : quel est le virus qui arrive avec...


Copyright © 1997-2022 Hardware.fr SARL (Signaler un contenu illicite / Données personnelles) / Groupe LDLC / Shop HFR