In January, Sdbot.ftp was the malware specimen most frequently detected by the free online antivirus solution Panda ActiveScan. In addition to this malicious code topping the ranking for the seventh month running, other notable aspects of this month’s list include the second place held by WMF Exploit and the presence of Tearec.A/W32.Blackmal.E@mm /BlackWorm virus or
The Winamp vulnerability in version 5.12 was announced at Secunia just a few days ago, details here. Note the Secunia advisory says “an exploit is publicly available”. Nullsoft released Wimamp 5.13 the same day the exploit was announced, but the spyware pushers saw an opportunity to infect more machines and make more money. SunbeltBLOG posted
First if at all possible TURN off the computer and put the infected drive on another system that is not infected. If for one reason or another you can not you should cosider one of the cdrom or floppy based recovery systems and an extra drive. You should preform recovery to a different filesystem then
According to secunia’s security advisory, several vulnerabilities were found in Firefox. Fortunately, Mozilla released Firefox 1.5.0.1 to fix them. See the release notes and the list of security fixes. If you still use FireFox 1.0.7, please note it is vulnerable to some of the problems as well. I’m expecting a 1.0.8 to be released but
On systems that are infected by Win32/Mywife@E.mm, BlackWorm, W32.Blackmal.E@mm, WORM_GREW.A, W32/Nyxem-D, Email-Worm.Win32.VB.bi, the malware is intended to permanently corrupt a number of common document format files on the third day of every month. February 3, 2006 is the first time this malware is expected to permanently corrupt the content of specific document format files. The
Sunbelt and Spyware Warrior reports about new rogue anti spyware AlfaCleaner. AlfaCleaner is a variant of the Anti Virus Pro, Winhound Spyware Remover, & XSRemover Downloadable from alfacleaner.com, innovagest2000.com We recommend to blocking specific domains and IP address: x-stories.org – 69.50.187.19 zlex.org – 85.255.115.227, 85.255.116.213, 85.255.117.51 Noi.themovie.com that calls the x-stories.org – 69.50.187.19 Cleanchan.net –
ICQCHK Trojan is installed by VideoCodec3_05b.exe to help you play “funny” movies. Now the Trojan’s web sites are closed. Related files in the %SysDir% folder (usually c:\ Windows\System32): kaboom.dll iewatch.exe A0003016.exe VideoCodec3_05b.exe sysmon.exe msx.dll gtrack.dll ietool[1].exe ietool[2].exe ietool[3].exe Removal Instructions Download special software: RegRun Reanimator Unzip it to any folder on your hard drive. *
You may want to print out or make a copy of these instructions before starting, because you will not be able to connect to the internet during most of this fix. Go to Start > Control Panel > Add or Remove Programs and remove the following programs, if found: NewDotNet Then using Windows Explorer, delete
AdwarePunisher – rogue antispyware (1, 2) uses flawed, inadequate detection scheme; same app as AdwareBazooka, AdwarePunisher, HitSpy, RemedyAntiSpy, SystemStable, & The SpyGuard. You may want to print out or make a copy of these instructions before starting, because you will not be able to connect to the internet during most of this fix. Go to
