Once a user clicks on the file, the worm scans the PC to see if it has already been infected. According to Finnish antivirus company F-Secure, Sober.D spreads either as an executable attachment or inside a password-protected Zip archive attached to...
Once the attachment is opened, it shows a dialog box with greetings and animation as well as a fake error message. Sal Viveros, director of marketing for McAfee, said the reason the worm has been so successful is because it hides in a.scr file...
Parson also admitted that he renamed the original 'MSBlast.exe' executable 'teekids.exe' after his online name 'teekid'. Parson allegedly created MSBlast.B, a variation that differed from the original worm mainly in that two files had been renamed...
If the user clicks "Yes" the worm shows a fake installation dialogue box, but also installs invisibly if the "No" button is pressed. When executed, the worm continues to pose as a security update, launching a message windows that states: "This will...
Called Lovgate, the worm has three variants (A,B and C), and is slightly more difficult to spot than the earlier 'Catherine Zeta Jones' malware, as emails carrying it come with random subject lines and contain attachments with a range of file names.
However the worm is programmed to spread when the email is opened, meaning users do not have to click on the attached file to spread the worm. The worm, called Frethem, does not carry a dangerous payload, but is already spreading quickly.
Did you find this white paper useful? 0 out of 1 users found this white paper useful
White Paper RSS
Download
