PDA

View Full Version : computer virus alert...again



brewmaster15
05-12-2003, 04:55 PM
Hi everyone,
I'll just pass this along from my IT department...a memo sent today...

Here is some information on the virus. Be careful at home as well.
W32.HLLW.Fizzer@mm is a mass-mailing worm that sends itself to all contacts in the Windows Address Book. It contains a backdoor that uses mIRC to communicate with a remote attacker. It also contains a keylogger and attempts to spread through the KaZaA file-sharing network. The worm attempts to terminate the process of various antivirus programs if they are found to be active.
Due to the number of submissions received from customers, Symantec Security Response is upgrading this threat from a Category 2 to a Category 3 threat.
new computer worm spreading over the Internet captures a user's keystrokes and creates a back door that could give an attacker access to the infected system or enable the machine to secretly be used in a denial of service attack.

The new worm, named "Fizzer," first appeared on May 8 and propagates using a wide range of methods, according to alerts posted by leading antivirus companies.
First and foremost, Fizzer is a mass-mailing worm, hiding in executable attachments to e-mail messages with seductive subject lines, said Vincent Gullotto, vice president of Avert Labs at Network Associates. The virus is contained in executable e-mail attachments with names such as "Jesus123.exe" that are generated randomly from lists maintained by the worm.
Messages containing the virus arrive in victims' e-mail inboxes with subjects such as "You might not appreciate this...," "Re: how are you?" and "I thought this was interesting..." according to alerts posted by antivirus companies McAfee, which is part of Network Associates, and F-Secure.
Fizzer affects machines running versions of Microsoft]'s Windows operating system and is capable of spreading through vulnerable shared directories on computer networks and over the Kazaa peer-to-peer network, McAfee said.


take care,
al

April
05-13-2003, 04:51 AM
ok im overpowering brew and stickying this for now. as i got about 4 today. and think one was a virus for sure.
ok unless someone tells you their sending you an attachment...id say dont open it. or email them and ask if they sent it.

Carol_Roberts
05-13-2003, 05:39 PM
Good advice April.

I'm in a lot of address books and so get all kinds of blanket forwards with attachments. Unless I have received a message to expect an attachment I never open them. I don't like getting blanket forwards. Many take a long time to load into my mailbox and then if they are unsolicited I automatically delete them unread. I've had a virus once. As far as I'm concerned you can't be too careful.

jeep
05-16-2003, 05:41 PM
Is there a unique way to scan for this, or is there a patch, as was the case for klez?

My computer sure had been acting up lately but Norton has not detected a virus.

Brian

Serpae
06-27-2003, 01:57 AM
Will Prazi get rid of em.............

AndyL
08-17-2003, 01:28 AM
Is there a unique way to scan for this, or is there a patch, as was the case for klez?

My computer sure had been acting up lately but Norton has not detected a virus.

Brian


Here's the email my ISP sent everyone on this virus has all kinds of good info!



Dear Shaw Customer,

Recent media reports have indicated that a virus (W32.Blaster.worm/Lovsan.worm) has occured which may have affected some of our customers. The W32.Blaster.worm takes advantage of a vulnerability on computers running Windows and can be triggered without opening an email attachment or any other file.

If your computer has been infected with this worm your computer may reboot itself without your intervention.

Should you believe that your computer may have been infected with this worm we recommend that you use the tool provided here to remove it. (http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html).

If you prefer to manually remove the virus instructions are provided here (http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html#removalinstructions).

To prevent this virus from infecting your computer Microsoft has provided the following updates.

For Windows XP users: http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

For Windows 2000 users: http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

Shaw has taken steps to minimize the spread of this particular worm to Shaw customers. In addition we encourage you to update your virus software with the latest virus definitions on a regular basis.

More information about this worm or other viruses can be located on our Start Page at http://start.shaw.ca by clicking on "Computer Virus Info".

If you have any questions please do not hesitate to contact us at (http://support.shaw.ca/contacts.htm).

Sincerely,

Shaw Internet