Welcome Guest ( Log In | Register)



2 Pages V   1 2 >  
Reply to this topicStart new topic
> New Computer Virus, Computer Virus that masquerades as NEWS
ARNEL
post Jun 21 2005, 04:58 AM
Post #1


Advanced Member
*******

Group: Members
Posts: 109
Joined: 18-May 05
Member No.: 7,198



Have you ever read or encouter such virus that disguised as NEWS..
well here is some info on how virus created found and works...

QUOTE
Researchers have identified a new computer virus that masquerades as news headlines from CNN's Web site.

Sophos, an anti-virus firm, says the virus -- identified as Crowt-A -- pulls headlines, subject lines and other content from CNN.com. Once opened, the virus can then scan the user's address book and try to email itself to those users.

The virus' subject line and attachment share the same name, Sophos researchers say, but change continually to match headlines from CNN.com's home page.

"Virus writers are always looking for new tricks to entice innocent computer users into running their malicious code," Carole Theriault, security consultant at Sophos, said in a statement. "This latest ploy feeds on people's desire for the latest news."

Although the number of PCs possibly infected was not immediately known, Sophos said there has been only a small number of sightings.

In addition to emailing itself to other users, the virus also installs a "backdoor Trojan function," according to Sophos. This function can pick up and send data such as keystrokes to a remote user -- a practice sometimes used by hackers to obtain sensitive information such as passwords.

Last May, a fast-spreading computer "worm" known as Sasser wreaked havoc on computer users worldwide, affecting several businesses, banks and government offices.

Users of the Windows operating systems reported sluggish machines and computers that quit or rebooted for no reason.

Anti-virus companies estimate that more than 1 million PCs were infected.

While a computer virus requires some sort of human intervention to be launched, such as opening an e-mail, a worm takes off on its own. Sasser spread through a Windows vulnerability known as LSASS, or Local Security Authority Subsystem Service -- hence the name Sasser.

Sasser would scan random Internet protocol addresses until it found a vulnerable system. Then it would copy itself into the Windows directory as an executable file, and would launch the next time the computer is booted. All that searching for a new "victim" would slow things down across the Internet...


if you have any informations or related case with regards to this virus maybe yo can post it here and share your ideas on how we can handle and remover not only this type of bugs but in general...
smile.gif

Notice from BuffaloHELP:
Do not copy and paste articles from another websites and post it without using [quote] tags! Copied from CNN.com. Added [quote] tags.


This post has been edited by BuffaloHELP: Jun 21 2005, 05:35 AM
Go to the top of the page
 
+Quote Post
rvalkass
post Jun 21 2005, 05:22 PM
Post #2


apt-get moo
Group Icon

Group: [MODERATOR]
Posts: 2,056
Joined: 28-May 05
From: Hertfordshire, England
Member No.: 7,593
Spam Patrol



Some general advice for avoiding viruses:

Buy yourself a firewall program or download one free, such as ZoneAlarm.

Regularly scan your computer for malware, adware, spyware and all types of viruses, again either by buying an anti-virus program or downloading a free one.

Often you can find patches on the Internet to fix specific viruses. I have found the best come from Symantec, the creators of Norton Antivirus (although Norton isn't needed for the fixes). They are generally quick and simple to use.
Go to the top of the page
 
+Quote Post
juice
post Sep 23 2006, 07:39 PM
Post #3


Premium Member
********

Group: Members
Posts: 183
Joined: 24-July 06
From: Cape Town
Member No.: 27,194



The best virus would be one that erases your entire disk, that would be an excellent virus but it would be better if it sent itself to everyone in your address book laugh.gif I'm sure Norton or Mcafee are making them, if there are no viruses no one purchases their software.
Go to the top of the page
 
+Quote Post
ProtoMan
post Sep 24 2006, 05:13 AM
Post #4


Advanced Member
*******

Group: Members
Posts: 121
Joined: 24-August 06
Member No.: 28,840



Just install a Firewall for your PC.

I insatalled Out Post Firewall from Agnitum and it works really fine for me.
No virus for a while smile.gif
Go to the top of the page
 
+Quote Post
Panzer
post Sep 24 2006, 07:03 PM
Post #5


Super Member
*********

Group: Members
Posts: 309
Joined: 3-July 06
From: Middle Earth
Member No.: 26,018



QUOTE
I insatalled Out Post Firewall from Agnitum and it works really fine for me.
No virus for a while


The thing about firewalls i hate is that they constantly update. Nearly every day my old one would want to check for updates, i turned the check update box off, it still wanted to check for updates.

The only way to truely stop it from scanning is to turn it off. Thats just the same as having no firewall. Anti Viruses work fine for me, i always scan files that i download and they always get the virus.

I guess that virus wont affect parts of the world. New Zealand doesnt get CNN and im sure lots of other parts dont as well.
Go to the top of the page
 
+Quote Post
DarkPsycho
post Sep 24 2006, 07:38 PM
Post #6


Premium Member
********

Group: Members
Posts: 162
Joined: 18-July 06
Member No.: 26,797



Why open an email attachment to see the latest news?
I would just check it at CNN.com for myself lol.
Go to the top of the page
 
+Quote Post
ProtoMan
post Sep 25 2006, 11:10 AM
Post #7


Advanced Member
*******

Group: Members
Posts: 121
Joined: 24-August 06
Member No.: 28,840



I agree that Anti-virus is better than the Firewall.

Because a good anti-virus software works well for me , too. smile.gif
Go to the top of the page
 
+Quote Post
Cool_Freaker
post Sep 26 2006, 12:14 AM
Post #8


Privileged Member
*********

Group: Members
Posts: 581
Joined: 9-January 05
From: Far far away
Member No.: 3,182



I have sygate personal firewall, it's free, it doesn't update by itself whenever it wants to, and it helped me delete many viruses before they started acting on people's computers. The thing with sygate is, each time a program tries to connect, or be connected from the internet, it will ask you if you allow it. Say one day you notice there is a virus on your computer, and a suspicious application extention, .dll, is trying to connect to the internet, you can prevent it's access. Then, with the program "Killbox", you can search and kill the process, deleting the file before it hurts your computer. Though I forgot a direct link to the download, search "Sygate Personal Firewall Free" for a link.
Go to the top of the page
 
+Quote Post
tydes
post Oct 5 2006, 07:12 AM
Post #9


Newbie [Level 3]
***

Group: Members
Posts: 41
Joined: 2-October 06
Member No.: 30,918



I don't use any antivirus or any firewall, but I never infected by virus!!!

Don't you know Brontox??? Avast know as VB.JY and norman detected as Rontokbro????

wink.gif