[virus/worm] welke worm is dit?

[Verwijderd]

Krijg constant mailtjes binnen met de attachment "your_archive.pif".. Iemand een idee om welke worm het nu weer gaat? Zodat ik de goede deinstallatie file van northon kan halen.

BvD

*wrong forum --> door parsen naar Beveiliging & Virussen svp*

[ Voor 23% gewijzigd door Verwijderd op 01-03-2004 16:24 ]

[Verwijderd]

anders zoek je even op internet

Is dat nieuwe virus (weet de naam niet meer), maar zoek maar

[Masch]

Netsky.d

Hier de mail die ik vanmiddag kreeg van Trend Micro hierover.

Dear Trend Micro customer:

As of March 1, 2004 3:15 AM PST, TrendLabs has declared a Yellow Alert to control the spread of WORM_NETSKY.D. TrendLabs has received numerous infection reports of this new NETSKY variant spreading in France, US, and Japan.

This worm propagates by sending out email with the following details:

SUBJECT: (any of the following)
Re: Your website
Re: Your product
Re: Your letter
Re: Your archive
Re: Your text
Re: Your bill
Re: Your details
Re: My details
Re: Word file
Re: Excel file
Re: Details
Re: Approved
Re: Your software
Re: Your music
Re: Here
Re: Re: Re: Your document
Re: Hello
Re: Hi
Re: Re: Message
Re: Your picture
Re: Here is the document
Re: Your document
Re: Thanks!
Re: Re: Thanks!
Re: Re: Document
Re: Document

MESSAGE BODY: (any of the following)
Your file is attached.
Please read the attached file.
Please have a look at the attached file.
See the attached file for details.
Here is the file.
Your document is attached.

ATTACHMENT: (any of the following)
your_website.pif
your_product.pif
your_letter.pif
your_archive.pif
your_text.pif
your_bill.pif
your_details.pif
document_word.pif
document_excel.pif
my_details.pif
all_document.pif
application.pif
mp3music.pif
yours.pif
document_4351.pif
your_file.pif
message_details.pif
your_picture.pif
document_full.pif
message_part2.pif
document.pif
your_document.pif

TrendLabs will be releasing the following EPS deliverables:

TMCM Outbreak Prevention Policy 89 (under testing)
Official Pattern Release 791 (ETA: 30 min)
Damage Cleanup Template 276 (under testing)

For more information on WORM_NETSKY.D, you can visit our Web site at: http://www.trendmicro.com...5.asp?VName=WORM_NETSKY.D

[momania]

Bekend virus dus, en ik meen dat er in Beveiliging & Virussen al een topic over loopt