Page 1 of 1

New Virus has a sense of humor, Update with pic of email

Posted: September 19, 2003, 2:16 pm
by Krimson Klaw
I just got a '911 email' about this at work. It comes as an official looking Microsoft email telling the user they need to update to prevent a virus attack. Once it's run, it then takes steps to disable any antivirus and firewall software that is installed on the system. It also disables the Registry Editor to attempt to prevent itself from being removed. It then attempts to spread itself via KaZaA, IRC, a built-in mail server, and via any network shares that the system may have access to, and it also attempts to harvest email addresses, usernames, and passwords.

I find it amusing, shoot me, but that's comedy. 'Microsoft email' Here, update your system by clicking this file so you don't get the latest virus due out today!

I feel sorry for tech support today.

-edit-update, I have the email right here, the file attachment even looks like an official Microsoft hotfix file Q946775.


http://www.tennesspeed.net/forums/showt ... eadid=9728

-edit-yet another update, when you click on the dialog box asking if you want to install it, if you click no, it just silently installs it anyway. Disabled aol messenger, disabled ftp programs, black ice, this thing is a beast.

Posted: September 19, 2003, 2:47 pm
by Ennia
heh I've seen this one today, I was suspicious from the start but what gives it away is we got multiple copies of that e-mail and each attachment's name is different.

Posted: September 19, 2003, 3:01 pm
by Skogen
That page you linked don't exist there Krimson!

Posted: September 19, 2003, 3:05 pm
by Krimson Klaw
Should be gtg now, had my homie link it to his rice boy site.

Posted: September 19, 2003, 3:22 pm
by Ebumar
omg that virus is a killer... My friend and former boss is having major problems with it on one of this larger networks.

Posted: September 19, 2003, 3:30 pm
by Animalor
The joy of an updated AV software.

I've seen this thing floating around in the spam box catch all and all attachments had been stripped already.

Posted: September 19, 2003, 3:37 pm
by Morgrym
Just had this fucking window pop up on Allakhazam's

Just a heads up.