 |
New Viruses |
A few simple rules to remember:
 | Prevent viruses from spreading by updating your antivirus software on a regular basis. |
| Do not open attachments received from somebody you don't know. |
| Be careful when receiving attachments from your friends. |
In most cases they are not aware of infection and will not know if the virus email was sent from their own PCs!
List of Viruses:
 A virus message is going around, advising people to delete the file JDBGMGR.EXE .This warning is a hoax. The file is part of a standard Windows installation, do not remove it. If you want further information go to this page. |
| Vet Virus Notification
for JS.CoolNow Detection for JS.CoolNow worm is available in Vet virus update 1838 or higher. You should download and apply the current Vet virus update from: http://www.vet.com.au/ JS.CoolNow is a Javascript worm that resides in Web pages and uses MSN Messenger to spread. This worm has been reported from the wild. CoolNow uses a similar trick to JS.Coolsite to propagate. The worm spreads by MSN messages, but users should note that there is no attachment. The message body contains a URL for a malicious website. The website that the user is directed to contains the worm. When a visitor opens an affected page, the worm code (written in Java Script) is executed by exploiting a known vulnerability. This vulnerability appears to be a variation of the Frame Domain vulnerability. For more information and a patch to address this issue, please visit: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secur ity/bulletin/MS02-005.asp There appears to be several variants of this worm in circulation, each with a very similar function but directing users to different URLs. |
| New Email Worm 'My
Party' A new computer bug that tries to trick computer users into clicking on a virus-infected Web link masquerading as party photos emerged in Asia on Monday morning and began spreading to Europe, computer experts said. Read more here. |
| Win32/Reeezak.Worm Also known as W32/Zacker.C, W32/Maldal.C Reeezak is a mass-mailer spreading through Microsoft Outlook. The worm attaches itself to an email with the subject line "Happy New Year", and attachment name "Christmas.exe" (37,376 bytes) carrying a Flash Animation icon. The message body reads: Hii I can't describe my feelings But all i can say is Happy New Year :) bye Once activated, it sends itself to all entries in Outlook Contacts list, and register itself to be run on every Windows restart. A few payloads observed so far: Selective keys on keyboard disabled. Files deleted from Windows System directory. As a mark of infection, the computer name in registry is changed to "ZaCker". |
| W32.Badtrans.B@mm. For more information about this worm, click here. |
| Win32.Vote.A
is worm that erases files in the Windows and other
directories and overwrites HTM and HTML files, spreading via the Internet by email using
MAPI and Microsoft Outlook. The worm appears attached to an email with the following subject: Fwd:Peace BeTweeN AmeriCa And IsLaM ! and body text: Hi iS iT A waR Against AmeriCa Or IsLaM !? Let's Vote To Live in Peace! with the attachment: WTC.exe. The worm launches two browser windows, one to a download site which contained the Win32.PSW.Barrio.50 trojan, and one to another site that is no longer available. The explorer home page is set to point to the download site. The worm drops two trojans in the windows system directory: VBS.VoteMix.A and VBS.VoteZak.A. |
| VBS.Potok.
A is a new worm spreading through the Internet via
Outlook that impersonates a message from Microsoft limits its spread to users running
WinNT and Win2000, The worm will arrive attached to an e-mail with the subject: New Generation of drivers and the message body: "Microsoft has published new driver for all types Video Cards, compatible with Windows 95/98/NT/2000/XP. You can read about it in attachment document. Best wishes, Microsoft " The worm is contained within the attachment "driver.doc (56 spaces).vbs". If your computer is infected click here. |
| Name
of virus: W32.Sircam.Worm@mm. It
is an email worm, and may have the following characteristics : "From" someone
you know, "Subject" is either something designed to be tempting, or may be
random text from previous emails . Always contains an attachment of a .com, .pif, .lnk, or .bat The file extension (file .xxx) may not show on your system, depending on your settings. if you find yourself infected with that virus, click here and download the fix-it program. |
