New malware sightings



Incidents.org had an entry in the last couple days on a malware infestation that was interesting and showed a couple things. 1) You can’t bet on antivirus to keep you safe (the initial installer was not detected by most AV vendors – suspicious by 1.) (If you think about it, this makes perfect sense – antivirus is reactionary and needs to have seen a bug once to recognize it again.) 2) Malware, once in the system, can bring all their friends.


The initial malware was called extdrvr.exe and was apparently a spambot of somesort (when run it would pull email addresses and message body from a website. (spm.freecj.com) Then it would download trojan downloaders, which would pull in more stuff, including a dialer, which pulled down ANOTHER downloader.

In an interesting competitive twist, the host file was modified to block access to various antivirus vendors, Microsoft ,etc… but also some well known sites for distributing OTHER malware. (Was it Netsky and bagle/beagle that “fought” against each other ?)

This system is definitely in line for a reinstall after this mess.

Related Posts

Blog Traffic Exchange Related Posts
  • The security of remote tech support (ultravnc sc or x11vnc with wrapper script) Well, I've got a nice way of doing "easy" one click (or one cut and paste) light desktop support for windows or linux, one uses ultravnc sc, the other uses x11vnc with a special wrapper script. So, what security flaws are there in this process? Well, for starters, I see......
  • Sophos suggests.... for more safety - get a Mac Analyzing the state of the computer world.... Sophos Antivirus has suggested that consumers consider a Mac for their next PC if they're concerned about the increasing swarm of malware targetting Windows PC's. The main point being there are no ACTIVE malware threats against Mac systems and Windows still seems to......
  • CDROM drives with yellow exclamation point in Windows XP I ran into something I hadn't yet seen firsthand today. A PC (running Windows XP home) with 2 optical drives (CD-RW and DVD drive). However, neither cd drive showed up in My Computer and both of them had a yellow exclamation point in the device manager listing. Of course, two......
Blog Traffic Exchange Related Websites
  • 3 Ways of Repairing the Windows Blue Screen The most frustrating computer error of all, the blue screen that pops up out of no where and almost always when you're in the middle of something very important. The screen appears listing some strange cryptic message of numbers and letters about something going wrong. For us average computer users......
  • Insider Tips on Coin Collecting It can be easy to think that you have mastered coin collecting once you have pulled together a large and decent collection. When you have coins that you like in your collection and have spent years on your collection, you feel like you cannot improve your collection. With that being......
  • Outlook Secure Temporary File Folder Symptom - can't open attachments to emails. This is one of the things about Micrsoft that will eventually push me over the edge. A few months back, my CFO called me in to his office saying he couldn't open attachments from an email in Excel.  I poked around a bit,......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site