Autorun Worm Invades ZIP files

BleepingComputer.com: Autorun Worm Invades ZIP files

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Autorun Worm Invades ZIP files

#1 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,109
Joined: 09-July 05
Location:Virginia, USA

Posted 06 June 2009 - 07:16 AM

Quote

Stealth technique used by malware is considered a core characteristic which has been developed, improved, redesigned, and reused. Michael Tants, Threat Researcher at Regional TrendLabs in Europe, has notified us of a worm that has a unique way of hiding: on infection, WORM_AUTORUN.JFZ writes a copy of itself in every ZIP-compressed file it finds on a system.

blog.trendmicro.com

Microsoft MVP - Consumer Security 2007-2012

Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#2 scff249

Indecisive Lurker

Group: Members
Posts: 1,319
Joined: 14-February 08
Gender:Male
Location:A galaxy far, far away...

Posted 07 June 2009 - 10:27 PM

......ugh....ew......autorun worms....and they're getting worse.

Does it still affect people who have their computers vaccinated or will it still bypass is what I wonder....

"Ototo'i wa usagi o mita no...Kino wa shika...Kyo wa anata." -Kotomi Ichinose (Clannad) [see below for translation]
"Day before yesterday I saw a rabbit, and yesterday a deer, and today, you." -The Dandelion Girl
"You are not alone, and you are not strange. You are you, and everyone has damage. Be the better person." -Katawa Shoujo

#3 Orange Blossom

OBleepin Investigator

Group: Moderator
Posts: 29,400
Joined: 14-July 06
Gender:Not Telling
Location:Bloomington, IN

Posted 08 June 2009 - 12:31 PM

From the article, it looks like one protection is to change Windows default settings so that all extensions are seen.

Orange Blossom :thumbsup:

Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom
An ounce of prevention is worth a pound of cure
SuperAntiSpyware, SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

BleepingComputer.com: Autorun Worm Invades ZIP files