|
|
|
 |
 |
|
| |
Notiziario Marketpress di
Mercoledì 22 Dicembre 1999 |
|
| |
|
|
| |
VIRUS ALERT - W32/NEWAPT.WORM
|
|
| |
|
|
| |
Milano, 22 dicembre 1999 -W32/newapt is an email worm. Avert has given it a risk assessment of Medium--on Watch. This worm arrives as an email attachment. The body of the email appears differently depending on whether the email client reads Html. If it does, the email text looks like this: http://stuart. Messagemates. Com/index. Htm Hypercool Happy New Year 2000 funny programs and animations. We attached our recent animation from this site in our mail ! Check it out If the email client is not Html-capable, the message reads: he, your lame client cant read Html, haha. Click attachment to see some stunningly Hot stuff The worm is in the attachment, which has a name chosen randomly from the following list: baby. Exe, bboy. Exe, boss. Exe, casper. Exe, chestburst. Exe, cooler1. Exe, cooler3. Exe, copier. Exe, cupid2. Exe, farter. Exe, fborfw. Exe, goal. Exe, goal1. Exe, g-zilla. Exe, irngiant. Exe, hog. Exe, monica. Exe, panther. Exe, panthr. Exe, party. Exe, pirate. Exe, s. Exe, saddam. Exe, theobbq. Exe, video. Exe. If the worm is run, the following dummy error message appears: The dinamic link library giface. Dll could not be found in the specified path [list of directory names] Note the misspelling of the word "dynamic". If the worm detects that Outlook Express is installed, it will search for messages received and build a list of addresses. The next time Windows is booted, the worm waits an unspecified amount of time and then attempts to send itself to one of the addresses in its list, using the format described above. Note: If you are using Mcafee Clinic, please click here to update Active Shield. - http://clinic. Mcafee. Com/clinic/virusscan/activeshield/start. Asp . |
|
| |
|
|
| |
<<BACK |
|
|
|
|
|
|
|
