|
An Internet Resource Page by: Bob in Houston |
|||
|
|||
|
|
|
|
|
| - Email
Propagation without using Attachments
- SARC Description of VBS.Bubbleboy - Trend Micro, Incorporated - Security Alert |
WSH
Win98 Win2k IEv5+ |
||
Danger, destructive |
- CIH
Virus Recovery
- Global CIH Virus Information Center - Damage: Companies have been infected - News Story |
Win95
Win98 |
|
| - CIAC
J-047: The ExploreZip Worm
- CERT® Advisory CA-1999-06 ExploreZip Trojan Program - F-Secure Description of ExplorereZip and Global Zipped Files Worm Information |
Win95
Office |
||
| - CERT®
Advisory CA-1999-04 Melissa Macro Virus
- W97M.Melissa.A - W97M.Melissa Word Macro Virus |
Win95+
Outlook Word |
||
| - A destructive .VBSworm - Began spreading
via Internet
Mail the weekend of 5/5/2000 from Philippines westward. Several
variants
observed within a couple days.
- http://www.complex.is/f-prot/loveabout.html - CIAC - K-039e: VBS.LoveLetter.A Worm - commandcom VBS LoveLetter Worm |
WSH
Win98 Win2k IEv5+ |
||
| - Ska Virus - Explains how to identify and get rid of happy99 | Wsock32 | ||
VBS.NewLove.A |
- Very nasty .VBS script - a
mutating email
worm that can destroy a system.
- first reported 05/19/2000 --See Story - quick indication: a .vbs attachment to an email with FW in the subject and a blank body. |
WSH
Win98 Win2k IEv5+ |
|
| -
F-Secure
Computer Virus Info: Code Red
- CERT Advisory CA-2001-26 Nimda Worm - F-Secure Computer Virus Info: Nimda |
Win95+
NT/Win2k IE/OEv5+ |
||
Danager, damaging & attempted destructive |
-
F-Secure
Computer Virus Info: Vote
- 09/24/2001 TechTV | WTC Virus Strikes |
WSH
Windows IE/OE/OL |
|
| - F-Secure
Computer Virus Info: Sircam
- Detination date 10-16-2001 |
WSH
Windows IE/OE/OL |
||
Danager, destructive |
-
F-Secure
Computer Virus Info: Magistr
- Symantec SARC |
WSH
Windows IE/OE/OL |
|
a variant of I-Worm.Magistr |
- able
to shut
down the user interface portion of ZoneAlarm, ZA continues to
protect
the PC and prevents the virus from being spread, only the user
interface
of ZA is affected by Magistr.B. Restart ZA and clean the system
- Symantec SARC |
* Winnt
* Win95 * Win98 *Windows |
|
| #ffcc99 |
|||
W32.Blaster.Worm |
08/11/2003 - First to exploit the DCOM RPC
vulnerability (described in Microsoft Security Bulletin MS03-026)
using TCP port 135. First reported by InternetStormCenter
where there are key links - Report to SBC/Prodigy here.
- SARC |
* WinNT
* Win2000 * WinXP #e1bd99 |
|