| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Season's First 9/11 Anniversary Worm Appears | |
|
||
| Time: 04:17 EST/09:17 GMT | News Source: CRN | Posted By: Jonathan Tigner | ||
|
The first of the season's 9/11 anniversary worms has been detected by security firms this week, and more are likely to follow. The worm, dubbed W32/Neroma@MM and Worm/Icebut.A by security vendors, typically shows 'Nice butt, baby!' in the e-mail message's body, displays the subject heading 'It's Near 911!', and disguises its payload as an attachment with the .jpg extension. Although the extension may fool some people into thinking it's a digital image--and launching the file--it's actually an executable that installs on the infected machine. If recipients open this attachment, Neroma will try to delete files on the 1st, 4th, 8th, 12th, 16th, 20th, 24th, and 28th day of each month. Neroma propagates by mailing itself to addresses it culls from an infected system's Microsoft Outlook address book. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 204 Last | Next |
The time now is
8:57:29 PM
ET.
Any comment problems? E-mail us |
| #1 By 1845 (12.209.152.69) at 9/6/2003 7:13:54 PM |
|
I'm guessing it will work the same way the Anna Kournakova (sp?) worm worked a few years back. I haven't studied either of them, but I'm guess it works something like <filename>.jpg.exe. Since Windows by default will hide a file extension, it will appear to the user that the file name is <filename>.jpg, even though it is really an exe. That just a guess.
I checked symantec (http://securityresponse.symantec.com/avcenter/venc/data/w32.neroma.b@mm.html), but they didn't explain it. |
| #2 By 135 (208.186.90.91) at 9/8/2003 2:36:42 AM |
|
Good idea. Using part of $40 billion to launch giant space message platform. When not broadcasting "Apply Windows updates you maroon!" messages, it could be used for announcements during football games.
Problem: Will put Goodyear blimp out of business, thus encouraging potential justice department lawsuit on monopolizing football game message delivery systems. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 204 Last | Next |
The time now is
8:57:29 PM
ET.
Any comment problems? E-mail us |
