Antivirus software too inconsistent

Saturday, March 8th, 2008

Anti-virus technologies are inconsistent when it comes to identifying attacks such as worms, phishing and botnets. That's according to a report from the University of Michigan's Electrical Engineering and Computer Science Department and network security company Arbor Networks, antivirus products are inconsistent at best when it comes to identifying attacks such ...

Fake F-Secure E-Mail Contains Malware

Saturday, March 8th, 2008

A Trojan horse has been sent to e-mail addresses disguised as a message from Helsinki, Finland, antivirus software vendor F-Secure, the company said in a statement. F-Secure said that an unknown attacker sent out thousands of infected e-mail messages crafted so that they appear to be from a nonexistent F-Secure employee, ...

Five steps to make your computer more secure

Saturday, March 8th, 2008

These days, a firewall, anti-virus software and anti-spyware programs are essential, but they might not be enough to protect you. Here are five things you can do for a little added security: Leave your computer on. This is a change from an earlier recommendation that you turn it off to save ...

Worm sleeps to avoid detection

Saturday, March 8th, 2008

The latest mass-mailing worm, Atak, hides by going to sleep when it suspects that antivirus software is trying to detect it. Atak was first discovered Monday. Although antivirus companies do not expect it to cause much damage, they say it will be a nuisance because it can generate a ...

Witty Worm

Saturday, March 8th, 2008

A new worm has been discovered exploiting the ISS/PAM ICQ module vulnerability. The worm payload is contained in a single 1025-byte UDP packet with a fixed source port of 4000 and a random destination port. Only the first 470 bytes of the payload are the working code of the worm; ...

W32.Sobig.F@mm Removal Tool

Saturday, March 8th, 2008

Symantec Security Response has developed a removal tool to clean the W32.Sobig.F@mm infections. The W32.Sobig.F@mm Removal Tool does the following: Terminates the W32.Sobig.F@mm viral processes. Deletes the W32.Sobig.F@mm files. Deletes the dropped files. Deletes the registry values that the worm added. http://www.symantec.com/avcenter/venc/data/w32.sobig.f@mm.removal.tool

W32.Blaster.Worm Removal Tool

Saturday, March 8th, 2008

W32.Blaster.Worm is a worm that exploits the DCOM RPC vulnerability (described in Microsoft Security Bulletin MS03-026) using TCP port 135. This worm attempts to download and run the Msblast.exe file. http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html W32.Blaster.Worm Removal Tool

New computer worm disguises itself as an e-mail from Microsoft

Saturday, March 8th, 2008

Antivirus vendors have warned about new computer worm which pretends to have been sent by Microsoft technical support. The e-mail containing the worm, dubbed Palyh (pronounced Pale-H) or Mankx, appears to come from support@microsoft.com, but is not from the software company. It contains a file which, upon execution, copies itself to ...