Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

CWS goes e-mail


  • Please log in to reply
1 reply to this topic

#1 Daisuke

Daisuke

    Cleaner on Duty


  • Members
  • 5,575 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Romania
  • Local time:04:16 PM

Posted 03 March 2005 - 04:50 PM

Roel  February 28, 2005 | 18:04  MSK

Today we detected a new Email-Worm which downloads and install AdWare onto the infected computer: we named it Email-Worm.Win32.CWS.a.

It's interesting to note that the worm doesn't spread like most other email worms do. Most email worms email copies of themselves. The copies are executed on the next victim's machine and finally more copies are sent to email addresses harvested on the infected machines.

Instead, Email-Worm.Win32.CWS.a emails a malicious file which is embedded in the worm.

Upon execution, this file - which we detect as Trojan-Downloader.Win32.CWS.gen - will download the worm and some AdWare onto the system. After the worm has been downloaded and installed the process will start over again.

I think this method is probably used to measure the worm's effectiveness, as the number of downloads can be monitored. Virus writing is indeed a business!


http://www.viruslist.com/en/weblog?weblogid=159988069
Everyday is virus day. Do you know where your recovery CDs are ?
Did you create them yet ?

Posted Image

BC AdBot (Login to Remove)

 


m

#2 Leurgy

Leurgy

    Voted most likely


  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:04:16 PM

Posted 04 March 2005 - 08:26 PM

I saw that, or something similiar, on a computer at Xmas. In Add/Remove programs it was listed as CoolWeb email plugin.

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users