New malware sightings



Incidents.org had an entry in the last couple days on a malware infestation that was interesting and showed a couple things. 1) You can’t bet on antivirus to keep you safe (the initial installer was not detected by most AV vendors – suspicious by 1.) (If you think about it, this makes perfect sense – antivirus is reactionary and needs to have seen a bug once to recognize it again.) 2) Malware, once in the system, can bring all their friends.


The initial malware was called extdrvr.exe and was apparently a spambot of somesort (when run it would pull email addresses and message body from a website. (spm.freecj.com) Then it would download trojan downloaders, which would pull in more stuff, including a dialer, which pulled down ANOTHER downloader.

In an interesting competitive twist, the host file was modified to block access to various antivirus vendors, Microsoft ,etc… but also some well known sites for distributing OTHER malware. (Was it Netsky and bagle/beagle that “fought” against each other ?)

This system is definitely in line for a reinstall after this mess.

Related Posts

Blog Traffic Exchange Related Posts
  • Remote tech support with anything - would I do it? I've tried to ask myself if I'd trust someone enough to let them run a remote session on my own desktop to solve a problem. I think the answer is "it depends". If you think about it, I do tech support for home users quite a bit and they let......
  • Microsoft Issues advisory on Powerpoint flaw Here's the link to Microsoft's advisory. The main workaround seems to be.... Don't open or save powerpoint attachments that you receive from untrusted sources, OR that you receive unexpectedly from trusted sources.... So, the only real workaround is what SHOULD be common practice. Whether or not there is a vulnerability......
  • Remote Tech Support with x11vnc and wrapper script So, the idea is that I wanted something "like" the Ultranvnc Single Click download, only for linux. The main idea being is that if someone is looking for a bit of desktop tech support on linux, we don't need to be giving instructions for 5 different package managers, or source......
Blog Traffic Exchange Related Websites
  • Trojan Horse Protection - Antivirus Trojan Software In today’s online environment it’s important to know what risks lie ahead at each click. This paper will describe so of the malicious kinds of attacks your Home/Office PC may encounter online. Now I’m sure we have all heard of Viruses online and some of you have heard of Trojans.......
  • Bitdefender VS Malwarebytes In a recent lab test, we decided to see what software is better at finding Malware.  On a machine running Bitdefender we decided to install and run Malwarebytes to see if it would pick up anything.  And it did.  Bitdefender has been sitting on: Trojan.Downloader Trojan.FakeAlert Disable.SecurityCenter Malwarebytes picked up......
  • High Tech Deck Skate Park Choices There is a great deal of interest in high tech deck skate park materials today as more and more people are becoming interested in the sport once again. As you watch the interest in skateboarding becoming more popular every year, there is more reason than ever for the innovations in......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site