New Year's Worm Spreads Warezov Trojan Variant

[Dr. Strangelove]

From today's SANS NewsBites Vol. 9 Num. 2

WORMS, ACTIVE EXPLOITS, VULNERABILITIES & PATCHES

--New Year's Worm Spreads Warezov Trojan Variant
(2 January 2007)
A worm purporting to be New Year's greetings is spreading a variant of
the Warezov Trojan horse program; the worm appears to be spreading
rapidly across the Internet. The email arrives with an attachment named
postcard.exe or postcard.zip; if Windows users open the attachment,
their computers can become infected. Once a machine is infected, it
starts sending spam to other computers to spread the worm.
Internet Storm Center Notes: http://isc.sans.org/diary.php?storyid=1987
http://isc.sans.org/diary.php?storyid=1988
http://isc.sans.org/diary.php?storyid=1989

http://www.vnunet.com/computing/news/2171592/first-worm
http://news.zdnet.co.uk/security/0,1000000189,39285293,00.htm


Doc

 

[bigstereo]

Thanks for the heads up

I don't open attachments unless I know who they are from.

 

[Dr. Strangelove]

Yes, but they could be from someone you know.

For example, if I had your email address in my contact list or address book, and I received the attachment, and opened it, my computer would be infected. Part of the infection/virus would read my contact list/address book, and begin sending email to those I know.

Thus, you would receive the attachment from me, and open it.

Unless your virus checker knows about this virus, and scans your email attachments, you become infected.

Doc

 

[Twenty20Man]

some people just didn't get spanked enough as a child

 

[yungin's-dad]

Hey Doc,

I really never open a lot of my mail anyways unless I know for sure the e-mail is safe (as much as possible anyway). But I really just wanted to chime in here, and say thanks for all you do for us in here. I mean, you are constantnly putting these type of threads up, and it's really a thankless service you provide us. I hope you know it doesn't go un noticed, I know you've spent a lot of time helping us stay worm free, even telling us about things we need. You know, these are the kind of things one would expect from a member of the year.

Thanks for all you do!!!!

Ron

 

[jimfet]

I love Worms, Trojans and Viruses. I even like Highjackers. A porn site is the best thing invented. They keep me loaded up with work.

 

[Dr. Strangelove]

Hey Doc,

I really never open a lot of my mail anyways unless I know for sure the e-mail is safe (as much as possible anyway). But I really just wanted to chime in here, and say thanks for all you do for us in here. I mean, you are constantnly putting these type of threads up, and it's really a thankless service you provide us. I hope you know it doesn't go un noticed, I know you've spent a lot of time helping us stay worm free, even telling us about things we need. You know, these are the kind of things one would expect from a member of the year.

Thanks for all you do!!!!

Ron

Thanks, Ron.

I could tell you some horror stories of people that continue to ignore the warnings and advice. There is something about receiving a package (or attachment) that some people find irresistible, and must open it.

Doc

 

[Dr. Strangelove]

I love Worms, Trojans and Viruses. I even like Highjackers. A porn site is the best thing invented. They keep me loaded up with work.

Yeah, I suppose it keeps some people employed. I also believe that the anti-virus companies are directly linked with hackers and virus writers. As part of the President's National Y2K team for the Year 2000 transition, I had the opportunity to associate with some of these folks. When I went home, I took a shower.

Doc

 

[wajobu]

Yup, know that worm and thwarted it at the gates over the weekend--darned-jerks-with-nothing-better-to-do. :gigglemad

 

[Drybasement]

Hey Doc,

I really never open a lot of my mail anyways unless I know for sure the e-mail is safe (as much as possible anyway). But I really just wanted to chime in here, and say thanks for all you do for us in here. I mean, you are constantnly putting these type of threads up, and it's really a thankless service you provide us. I hope you know it doesn't go un noticed, I know you've spent a lot of time helping us stay worm free, even telling us about things we need. You know, these are the kind of things one would expect from a member of the year.

Thanks for all you do!!!!

Ron

My thanks as well. I read all these posts. I keep a tight ship in my computer world and the info the good doctor posts is very helpful.

Cheers Dr. Strangelove :thmbsp: