±Recent Visitors

Recent Visitors to Com-Central!

±User Info-big


Welcome Anonymous

Nickname
Password

Membership:
Latest: HighestAce
New Today: 0
New Yesterday: 0
Overall: 6648

People Online:
Members: 0
Visitors: 424
Total: 424
Who Is Where:
 Visitors:
01: Community Forums
02: Community Forums
03: News Archive
04: Member Screenshots
05: News Archive
06: Community Forums
07: Community Forums
08: Community Forums
09: Home
10: Community Forums
11: Community Forums
12: Member Screenshots
13: Community Forums
14: Community Forums
15: Home
16: News Archive
17: Community Forums
18: News Archive
19: Community Forums
20: Member Screenshots
21: Home
22: Downloads
23: Home
24: Community Forums
25: Downloads
26: Member Screenshots
27: Community Forums
28: Community Forums
29: Community Forums
30: Community Forums
31: Home
32: Home
33: Community Forums
34: Photo Gallery
35: Home
36: Community Forums
37: Community Forums
38: News Archive
39: Community Forums
40: Home
41: Community Forums
42: Community Forums
43: Member Screenshots
44: Downloads
45: Community Forums
46: Community Forums
47: Photo Gallery
48: Community Forums
49: Community Forums
50: Community Forums
51: Home
52: Community Forums
53: Home
54: Community Forums
55: Photo Gallery
56: Search
57: Community Forums
58: Downloads
59: Community Forums
60: Community Forums
61: Community Forums
62: Home
63: Home
64: Home
65: Community Forums
66: Home
67: Member Screenshots
68: Home
69: Community Forums
70: Community Forums
71: Member Screenshots
72: Home
73: Community Forums
74: Community Forums
75: Community Forums
76: Home
77: Member Screenshots
78: Home
79: Community Forums
80: Member Screenshots
81: Photo Gallery
82: Community Forums
83: Member Screenshots
84: Community Forums
85: Photo Gallery
86: Community Forums
87: Home
88: Community Forums
89: News Archive
90: Community Forums
91: Community Forums
92: Community Forums
93: Member Screenshots
94: Member Screenshots
95: Community Forums
96: Community Forums
97: Photo Gallery
98: Member Screenshots
99: News Archive
100: Member Screenshots
101: Community Forums
102: Home
103: Member Screenshots
104: News Archive
105: Home
106: Community Forums
107: Community Forums
108: Statistics
109: Community Forums
110: Community Forums
111: Home
112: Community Forums
113: Member Screenshots
114: Member Screenshots
115: Photo Gallery
116: Member Screenshots
117: Community Forums
118: Community Forums
119: Home
120: Member Screenshots
121: Downloads
122: Community Forums
123: Community Forums
124: Home
125: Community Forums
126: Member Screenshots
127: Community Forums
128: Community Forums
129: Community Forums
130: Community Forums
131: Member Screenshots
132: Community Forums
133: Member Screenshots
134: Downloads
135: News Archive
136: Downloads
137: Downloads
138: Community Forums
139: Member Screenshots
140: Downloads
141: Community Forums
142: Home
143: Community Forums
144: News Archive
145: Home
146: Home
147: Community Forums
148: Community Forums
149: Supporters
150: Community Forums
151: Community Forums
152: Community Forums
153: Member Screenshots
154: Home
155: Community Forums
156: Community Forums
157: Community Forums
158: Community Forums
159: Community Forums
160: Community Forums
161: Community Forums
162: Community Forums
163: Community Forums
164: Community Forums
165: Photo Gallery
166: Photo Gallery
167: News Archive
168: News Archive
169: Home
170: Community Forums
171: Downloads
172: Community Forums
173: Downloads
174: Home
175: Community Forums
176: Home
177: Community Forums
178: Home
179: Community Forums
180: Community Forums
181: Community Forums
182: Downloads
183: Home
184: Member Screenshots
185: Home
186: Community Forums
187: Home
188: Community Forums
189: News
190: Photo Gallery
191: Member Screenshots
192: Community Forums
193: Home
194: Community Forums
195: Community Forums
196: Home
197: Community Forums
198: Home
199: Community Forums
200: Community Forums
201: Community Forums
202: Member Screenshots
203: Member Screenshots
204: Downloads
205: Community Forums
206: Community Forums
207: Downloads
208: Community Forums
209: Member Screenshots
210: Community Forums
211: News
212: Downloads
213: Member Screenshots
214: Home
215: Home
216: Home
217: Photo Gallery
218: News
219: Community Forums
220: Home
221: Community Forums
222: Community Forums
223: Member Screenshots
224: Home
225: Community Forums
226: Community Forums
227: Community Forums
228: Member Screenshots
229: Community Forums
230: Community Forums
231: Home
232: Member Screenshots
233: Member Screenshots
234: Member Screenshots
235: Member Screenshots
236: Community Forums
237: Community Forums
238: News Archive
239: Home
240: Home
241: Member Screenshots
242: Community Forums
243: Home
244: News Archive
245: Community Forums
246: Community Forums
247: Community Forums
248: Home
249: Community Forums
250: Member Screenshots
251: Home
252: Community Forums
253: News Archive
254: Member Screenshots
255: Community Forums
256: Home
257: Home
258: Community Forums
259: Member Screenshots
260: Community Forums
261: Member Screenshots
262: Home
263: Home
264: Community Forums
265: Downloads
266: Community Forums
267: Downloads
268: Community Forums
269: Community Forums
270: Home
271: News Archive
272: Downloads
273: Home
274: Community Forums
275: Home
276: Community Forums
277: Member Screenshots
278: Member Screenshots
279: Home
280: Home
281: Community Forums
282: Community Forums
283: Community Forums
284: Community Forums
285: Member Screenshots
286: Home
287: Downloads
288: News Archive
289: Home
290: Community Forums
291: Member Screenshots
292: Member Screenshots
293: Community Forums
294: Community Forums
295: Community Forums
296: Community Forums
297: Community Forums
298: Member Screenshots
299: Community Forums
300: Home
301: Member Screenshots
302: Home
303: Home
304: Community Forums
305: Member Screenshots
306: Community Forums
307: Community Forums
308: Home
309: Community Forums
310: News
311: Member Screenshots
312: Community Forums
313: Home
314: Community Forums
315: Community Forums
316: Community Forums
317: Member Screenshots
318: Home
319: Home
320: Community Forums
321: Community Forums
322: Member Screenshots
323: Photo Gallery
324: Community Forums
325: Member Screenshots
326: Photo Gallery
327: Community Forums
328: Member Screenshots
329: Community Forums
330: Home
331: Community Forums
332: Community Forums
333: Community Forums
334: Community Forums
335: Community Forums
336: Community Forums
337: Downloads
338: Community Forums
339: Community Forums
340: Community Forums
341: Photo Gallery
342: Member Screenshots
343: Statistics
344: Community Forums
345: Community Forums
346: Community Forums
347: Photo Gallery
348: Community Forums
349: Home
350: News Archive
351: Home
352: News Archive
353: Photo Gallery
354: Community Forums
355: Community Forums
356: Your Account
357: Community Forums
358: Photo Gallery
359: Home
360: Home
361: Community Forums
362: Member Screenshots
363: Member Screenshots
364: Community Forums
365: Downloads
366: Community Forums
367: Community Forums
368: Member Screenshots
369: Community Forums
370: Community Forums
371: Community Forums
372: Downloads
373: Home
374: Downloads
375: Home
376: Community Forums
377: Community Forums
378: Community Forums
379: Community Forums
380: Community Forums
381: Community Forums
382: Downloads
383: Home
384: Home
385: Community Forums
386: Community Forums
387: Community Forums
388: Member Screenshots
389: Member Screenshots
390: Community Forums
391: Community Forums
392: Community Forums
393: Photo Gallery
394: Home
395: Member Screenshots
396: Community Forums
397: Downloads
398: Home
399: Member Screenshots
400: Home
401: Community Forums
402: Home
403: Community Forums
404: Home
405: Community Forums
406: Member Screenshots
407: News Archive
408: Community Forums
409: Home
410: Home
411: Community Forums
412: Home
413: Community Forums
414: Member Screenshots
415: Community Forums
416: Community Forums
417: Community Forums
418: Member Screenshots
419: Member Screenshots
420: Home
421: Photo Gallery
422: Community Forums
423: Member Screenshots
424: Community Forums

Staff Online:

No staff members are online!
New MSN Messenger Worms.. :: Archived
This is a forum for Software related items such as OS', Virus notices, cool or free programs, etc. Gaming software should go in the gaming folder pertaining to the current info.
Post new topic    Revive this topic    Printer Friendly Page     Forum Index ›  Software

Topic Archived View previous topic :: View next topic  
Author Message
Shadow_Bshwackr
Janitor

Offline Offline
Joined: Jan 21, 2005
Posts: 7019
Location: Central Illinois, USA
PostPosted: Wed Mar 09, 2005 6:57 am
Post subject: New MSN Messenger Worms..

Worm Chatter Escalates on MSN Messenger
By Ryan Naraine
March 7, 2005

Anti-virus vendors report an increased chatter of virus activity on Microsoft Corp.'s Microsoft Network messenger Sunday night through Monday.

In what appears to be a concentrated attack on users of the MSN instant messaging client, security experts warn that several new worms with unique replication techniques have been launched alongside mutants of the known Bropia virus family.

"We are regularly adding detection for new Bropia worm variants," F-Secure virus analyst Alexey Podrezov said in a notice.

In addition, he said two new MSN worms�identified as Kelvir and Sumom�have also joined the fray.

PointerClick here to read more about the Bropia virus family.

Both Kelvir and Sumom, like the Bropia mutants, are capable of installing the Backdoor.Rbot Trojan horse, which gives an attacker remote access to a compromised system.

The Rbot Trojan can be controlled via IRC (Internet Relay Chat) to monitor networks and hijack sensitive information; scan a network of machines for unpatched security holes; or to launch denial-of-service attacks.

The Trojan can also be used to log keystrokes and send detailed information about the victim machine, including passwords, to the attacker.

eWEEK.com Special Report: Cyber-Crime

Shane Coursen, senior technology consultant at Kaspersky Lab, said the increased instant messaging worm activity underscores the use of social engineering tactics to trick victims into executing a malicious file.

In the case of the Bropia variants, the worm author uses the lure of adult-oriented images (Paris Hilton's name is commonly associated with the worms) transmitted as hyperlinks in an IM session.

PointerRead more here about a Bropia virus mutant that posed as sexy image files.

The worms all arrive with a .PIF (program information file) extension and, once a user clicks on the link, the computer becomes infected and in turn continues the propagation by sending the file to all found MSN Messenger contacts.

"This has the potential to massively distribute itself," Coursen told eWEEK.com. "It sends itself wholesale to all contacts on the MSN buddy list. One more click there and the cycle continues."

Additionally, the worm attempts to download a file named "me.jpg" save it to the infected C:\ drive as "dumprep.exe."

When executed, the downloaded file is a variant of the RBot backdoor, Coursen said.

Anti-virus experts at Trend Micro Inc. rate the latest threat as "medium risk" and warned that the backdoor Trojan element could present untold dangers.

"The similarities between these worms may be attributed to MSN propagation code that has been posted to forums used by virus writers," the company said in an advisory.

DEALING WITH AN INFECTION:

# F-Secure Inc. has posted virus definitions for Bropia, Kelvir and Sumom.

eWEEK.com Special Report: Internet Security

# Kaspersky Lab offers detailed descriptions for the Bropia and the Rbot Trojan family.

# Trend Micro Inc. offers Housecall, a free virus scanner. The company has also posted updated virus definitions for the latest threat.

# McAfee's Stinger is a stand-alone utility used to detect and remove specific viruses. It is not meant to be a substitute for full anti-virus protection, but rather a tool to assist administrators and users when dealing with an infected system.


Just for your info....:D
Back to top
View user's profile Visit poster's website Photo Gallery
AARP-StepChild
Power User

Offline Offline
Joined: Mar 06, 2005
Posts: 43
Location: Hampton Va. US
PostPosted: Wed Mar 09, 2005 8:10 am
Post subject: Re: New MSN Messenger Worms..

I run Kapersky religiously and have seen only one instance of the trojan. Thanks for the update.

_________________

"THIS is my Kung Fu, and it is STRONG"
TS Server: 151.199.149.217:8770
members.cox.net/raynmanf037/
mysite.verizon.net/rfriedenberg/
Back to top
View user's profile Visit poster's website MSN Messenger
401RCAF_HitMan
Power User

Offline Offline
Joined: Dec 26, 2004
Posts: 1470
Location: Ontario, CANADA (next to the beer store)
PostPosted: Wed Mar 09, 2005 3:50 pm
Post subject: Re: New MSN Messenger Worms..

Thanks for the info Bush.....I hate them fekin worms...EEEEeewwwwwwwww
Back to top
View user's profile Visit poster's website
RCAF_MadDog
Janitor

Offline Offline
Joined: Nov 13, 2004
Posts: 849

PostPosted: Wed Mar 09, 2005 7:48 pm
Post subject: Re: New MSN Messenger Worms..

Thx Bush worms can kill a Dog so I guess ya saved my life on this one lol

_________________
RCAF_MadDog RCAF Command
Back to top
View user's profile Photo Gallery
RAF92_Moser
Power User

Offline Offline
Joined: Jan 06, 2005
Posts: 703
Location: Illinois
PostPosted: Sun Mar 13, 2005 9:13 am
Post subject: Re: New MSN Messenger Worms..

Been a little worried about this one. Is the worm. Dumprep.exe? Haven't accepted any of those files, but need a confirmation.





Also, yesterday, got a bunch of C++ script errors, then messenger crashed. Never happened before....messenger is acting fine though now. It may be a glitch and I am running the 7.0 beta. Antivirus says nothing is there, but it may not know the worm exists.

_________________
"Well, I gotta go...Yeh I'm running out of change"

Back to top
View user's profile Send e-mail Photo Gallery
Shadow_Bshwackr
Janitor

Offline Offline
Joined: Jan 21, 2005
Posts: 7019
Location: Central Illinois, USA
PostPosted: Mon Mar 14, 2005 6:30 am
Post subject: Re: New MSN Messenger Worms..

The worms all arrive with a .PIF (program information file) extension and, once a user clicks on the link, the computer becomes infected and in turn continues the propagation by sending the file to all found MSN Messenger contacts.

"This has the potential to massively distribute itself," Coursen told eWEEK.com. "It sends itself wholesale to all contacts on the MSN buddy list. One more click there and the cycle continues."

Additionally, the worm attempts to download a file named "me.jpg" save it to the infected C:\ drive as "dumprep.exe."

When executed, the downloaded file is a variant of the RBot backdoor, Coursen said.


I would say you got it ...:wink:
Back to top
View user's profile Visit poster's website Photo Gallery
RAF92_Mustang
Power User

Offline Offline
Joined: Jan 22, 2005
Posts: 422
Location: Just another walk in the clouds.
PostPosted: Mon Mar 14, 2005 7:46 am
Post subject: Re: New MSN Messenger Worms..

dont to sending it to me moser...

_________________


Back to top
View user's profile Send e-mail Visit poster's website Photo Gallery
401RCAF_HitMan
Power User

Offline Offline
Joined: Dec 26, 2004
Posts: 1470
Location: Ontario, CANADA (next to the beer store)
PostPosted: Mon Mar 14, 2005 7:18 pm
Post subject: Re: New MSN Messenger Worms..

dumprep.exe is also a XP file

dumprep.exe forms a part of Microsoft Windows XP (and later versions), in-built fault logging software. Upon serious errors this program will write the details to a text file and request the information be sent to Microsoft. This program is a non-essential system process, and is installed for third party use.

so don't shite yerself if you find it..lol
Back to top
View user's profile Visit poster's website
RAF92_Moser
Power User

Offline Offline
Joined: Jan 06, 2005
Posts: 703
Location: Illinois
PostPosted: Mon Mar 14, 2005 8:33 pm
Post subject: Re: New MSN Messenger Worms..

Alright, installed that Stinger, it couldn't find any worm. Looked up Dumprep.exe on the net, found exactly what Hitman said. Whew, almost did shite myself...

_________________
"Well, I gotta go...Yeh I'm running out of change"

Back to top
View user's profile Send e-mail Photo Gallery
RAF92_Mustang
Power User

Offline Offline
Joined: Jan 22, 2005
Posts: 422
Location: Just another walk in the clouds.
PostPosted: Tue Mar 15, 2005 2:26 pm
Post subject: Re: New MSN Messenger Worms..

A person on my MSN messenger list just tried to send me a file called "Sadam Song.pif" considering I never talk to them, and I didnt know what a PIF file was, I declined the transfer, do ya think this was related to the worm?

Also, *EDITING ORIGIONAL POST* I just got sent another message from them and I took a screenshot.. Names and e-mail blured for privacy...


_________________


Back to top
View user's profile Send e-mail Visit poster's website Photo Gallery
RAF92_Moser
Power User

Offline Offline
Joined: Jan 06, 2005
Posts: 703
Location: Illinois
PostPosted: Tue Mar 15, 2005 5:18 pm
Post subject: Re: New MSN Messenger Worms..

Definitely, a threat. I'll try to find out stuff about that.

_________________
"Well, I gotta go...Yeh I'm running out of change"

Back to top
View user's profile Send e-mail Photo Gallery
Display posts from previous:   
Post new topic    Revive this topic    Printer Friendly Page    Forum Index ›  Software
Page 1 of 1
All times are GMT - 6 Hours

Archive Revive
Username:
This is an archived topic - your reply will not be appended here.
Instead, a new topic will be generated in the active forum.
The new topic will provide a reference link to this archived topic.