Worms | MyAntiSpyware

MyAntiSpyware

How to remove Koobface worm (Removal guide)

Myantispyware team November 22, 2009 21 Comments Malware removal, Worms

Koobface worm infects computers via messages thats spreads through Facebook, Twitter, Myspace and other social networks. The contents of the SPAM message is: Saw thhat vvideo yesterdday… How coulld you do succh a thingg? Sweet!! Yourr ass loooks greaat on thiss video!! WWow! Is tthat reeally you in thaat videeo? Funny vide0 with me 🙂

Read more »
How to remove Conficker worm (Downadup or Kido)

Myantispyware team January 12, 2009 21 Comments Tutorials - HowTo, Worms

Win32/Conficker.AA also known W32/Worm.AHGV, Net-Worm.Win32.Kido.bg, Worm:Win32/Conficker, W32/Conficker.worm.gen, Mal/Conficker is a worm that uses Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability (MS08-67) in order to spread on other computers in the local network. The worm blocks user access to security websites, deletes all the System Restore points prior to infection, protects itself from

Read more »
MSN Worm Used to install Backdoor | How to remove

Myantispyware team October 1, 2006 No Comment Adware, Worms

F Secure have received reports from customers of suspicious pop-ups that were being spammed through MSN Messenger. Below is a sample message: lol check 🙂 http://peopleonline.pe.funpic.de/[REMOVED].pif When the link in the message is clicked, it automatically downloads a file named photo942.PIF. This file is the backdoor component of Licat.C This is used to connect to

Read more »
Worm uses MS04-007, MS05-017, MS05-039, MS06-040 bugs

Myantispyware team August 31, 2006 No Comment Worms

For the past several days, ISC have received all kinds of emails about the recent increase in scanning on port 139. One of loyal readers out there on the ‘Information SuperHighway’, Alex Pettinger, wrote and and gave us some netstat and fport outputs from one of his machines that seemed to be affected by the

Read more »
New worm disables Security Software

Myantispyware team June 20, 2006 2 Comments Worms

Sanbeltblog reported about new World Cup Soccer Worm. The worm arrives as an E-mail attachment with one of the following subjects and message bodys: Subjects: 1. Soccer fans killed five teens 2. Crazy soccer fans 3. Please reply me Tomas 4. My tricks for you 5. Naked World Cup game set 6. My sister whores,

Read more »
Banwarum Worm Offers Tickets for the WORLD CUP

Myantispyware team May 28, 2006 No Comment Worms

The new mass mailing worm called Banwarum (also known as Zasran and Ranchneg) that is using World Cup themed email messages. The worm sends itself as a password protected archive and includes in the email the password for it. The emails sent by the worm are in German and some of them offer tickets for

Read more »
Fake Windows Sites + WMF Explot + Keyloger = New Botnet

Myantispyware team March 13, 2006 No Comment Exploits & Vulnerabilities, Identity Theft, Worms

Adam Piggott of Proactive Computing received message from Microsoft. The email had a link to a supposed Windows update site, but, in fact, the link went to a site running the WMF exploit. On an unpatched Windows computer, the exploit hits immediately. Social engineering is also at work, urging users to click a link at

Read more »
New worm with File encrypt function found

Myantispyware team February 24, 2006 No Comment Worms

Yesterday Kaspersky Lab came across a worm with a German (speaking) background, Email-Worm.Win32.Skowor.b. In contrary to programs like GPCode, Skowor is able to replicate; it tries to spread via a share that it creates. When installed, the worm displays a message telling the user that s/he has 5 pc reboots in order to get a

Read more »
Leap.A – Worm for Mac OS X

Myantispyware team February 18, 2006 No Comment Worms

Leap.A is a binary file compiled for Mac OS X. It arrives in an archive file, called ‘latestpics.tgz’. When the executable in the archive is opened the virus activates. First it drops an icon resource and an external hook bundle which is used for spreading through iChat. Spreading through iChat Leap.A installs a bundle to

Read more »
New Bagle – W32/Bagle.FM@mm, Email-Worm.Win32.Bagle.fm mass-mailer found

Myantispyware team February 11, 2006 No Comment Trojan, Virus, Worms

F Secure have received a new Bagle mass-mailer. This Bagle mass-mailer first appeared on February 9th, 2006. It spreads in e-mails sometimes pretending to be an antivirus definition file from Symantec. The worm also spreads to shared folders. In addition it drops a trojan downloader. F Secure detect this new mass mailer as W32/Bagle.FM@mm. When

Read more »

1
2
Next