 Atak.A worm - new mass mailer threat, Goes into sleep mode to avoid detection |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.  |
  Jul 14 2004, 08:58 PM
Post
#1
|
|
 Security Reporter  Group: News Reporters Posts: 484 Joined: 10-April 04 From: Roanoke, Virginia Member No.: 107  |
http://www.symantec.com/avcenter/venc/data/w32.atak@mm.html http://secunia.com/virus_information/10649/atak-a/ http://vil.nai.com/vil/content/v_126679.htm This is a new mass-mailing worm that launches notepad.exe when executed. This is a mass-mailing worm bearing the following characteristics: * harvests email addresses from the victim machine * spoofs the From: address * constructs messages using its own SMTP engine Subject: Read the Result! or Important Data! Message: Authorized Researcher Only. Attachment: *.zip, *.com, *.exe What makes new worm unique is that it hides from anti-virus software by going to sleep mode when being scanned, making it undetectable. http://www.dmeurope.com/default.asp?ArticleID=2316 -------------------- |
 |
 
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 4th September 2008 - 11:37 PM |
© 2003-2008 All Rights Reserved Bleeping Computer LLC.