New Worm Tries To Delete Your Security Software

[decrypted]

Anyone clicking on links in their email from unknown senders are just idiots. Case in point, my boss at my last job would "somehow" keep getting infected with viruses (his computer that is), and low and behold, he would actually follow these links. Such a dumbass. Just go to YouPorn if you want tons and tons of free goodies.

 

[ronch79]

I guess if you're that gullible, then you deserve to have your hard disk wiped out. Gullible, stupid, and/or greedy.

 

[beayn]

[citation][nom]f4nt4sm4[/nom]The problem is not filtering, the problem is why ppl click those links when the email sender is something like urmedsareus@infectmypc.com and its in the spam folder?[/citation]

But it isn't from a random address like that, it's from your friends who have you in their address book. The article states that the virus emails people on your address book.

Even the most stupid person doesn't click on emails from people they don't know. At the same time, everyone is convinced that email from their friends is OK. In reality, email from your friends is how you get infected 95% of the time.

 

[applegetsmelaid]

I got worms.

 

[Camikazi]

[citation][nom]sargentchimera[/nom]People actually follow those links?[/citation]
The answer you are looking for is yes, people are idiots.

 

[Camikazi]

[citation][nom]Shadow703793[/nom]lol. +1. Btw, any one who pay for pr0n is an idiot. There is too much free pr0n on the interwebs to satisfy a man for 20 life times.[/citation]
But, is it enough to satisfy a woman?

 

[bv90andy]

best AV is yourself. Don't open any strange links, even if it is from your friends. I never touch e-mail with "xxx person invites you to take this test" or anything like that.

This one is really smart if it looks like it's a PDF but it's actually executable.

 

[nukem950]

Yep. I have a relative that works for a major company. The things gets installed and then take overs the outlook address book. Spam mails everyone. Now he has been spending the last 3 days cleaning it up at his locations because of the idiots that ignore emails warning about the worm and click every single attachment they ever get.

I really think they need to increase the punishment for viruses and worms that these people create.

 

[demonhorde665]

i think the hackers that make worms and viruses need to be casterated.

 

[Silmarunya]

[citation][nom]demonhorde665[/nom]i think the hackers that make worms and viruses need to be casterated.[/citation]

And the people stupid enough to open such links should be castrated too. After all, someone that dumb shouldn't be allowed to raise a child...

 

[Guest]

From Panda Labs
“Here you have” worm linked to cyber jihadists

The worm creates the following files:

/WINDOWS/autorun.inf
/WINDOWS/autorun2.inf
/WINDOWS/csrss.exe
/WINDOWS/ff.exe
/WINDOWS/gc.exe
/WINDOWS/hst.iq
/WINDOWS/ie.exe
/WINDOWS/im.exe
/WINDOWS/op.exe
/WINDOWS/pspv.exe
/WINDOWS/rd.exe
/WINDOWS/re.exe
/WINDOWS/re.iq
/WINDOWS/system/Administrator CV 2010.exe
/WINDOWS/system/updates.exe
/WINDOWS/system32/SendEmail.dll
/WINDOWS/system32/wbem/Logs/wbemcore.lo_
/WINDOWS/system32/wbem/Logs/wbemprox.log
/WINDOWS/tryme1.exe
/WINDOWS/vb.vbs
/autorun.inf
/open.exe

Plus there is more information on the worm if you are interested in the Panda Labs news article.

 

[randomizer]

[citation][nom]Vladislaus[/nom]In Vista and 7 even if we have administrative rights programs that we run haven't unless we give them.[/citation]
Actually in Win 7 by default you won't get a UAC prompt when Microsoft software tries to perform administrative tasks, or malware successfully pretending to be Microsoft software of course. Microsoft had to increase the attack surface of Windows 7 to make UAC less annoying because they didn't feel like refactoring their code base from the start with Vista like they should have (which would have reduced the number of popups).

UAC was a good concept but implemented badly on top of a bad design. Security is about design, not fancy features. Windows was not designed to be secure, so it needs patchwork.

Hopefully with the next iteration of Windows Microsoft at least goes the extra mile to enforce all software to require user permissions to perform administrative tasks, with a password, not a yes/no prompt (standard accounts are already like this, but Win 7 doesn't use them unless you create one). It should also require some effort to disable this password requirement, not just a few clicks. It would at least be on par with Linux in one area then.

 

[Arguggi]

You don't only have to click on the link that downloads the worm (who the hell hasn't heard of youporn and still wants to download porn from an unknown email?), you have to actually RUN what should be a PFD! Unbelievable

 

[Vladislaus]

[citation][nom]randomizer[/nom]Actually in Win 7 by default you won't get a UAC prompt when Microsoft software tries to perform administrative tasks, or malware successfully pretending to be Microsoft software of course.[/citation] True that Microsoft made the uac pop-up appear less times. And for that they almost eliminated the pop-up when we fiddle with the control panel. Other than that even the rest of microsoft software like the command line, office, internet explorer, live and so forth need uac permission to change the system. Also the applications on the control panel are digitally signed and up until now I haven't seen a program that pretends to be a control panel application and is able to bypass the uac check without asking for permission.

 

[randomizer]

[citation][nom]Vladislaus[/nom]Also the applications on the control panel are digitally signed and up until now I haven't seen a program that pretends to be a control panel application and is able to bypass the uac check without asking for permission.[/citation]
I would hope that it was fixed prior to release, but the Win 7 RC had a number of very simple exploits which took advantage of the weakened UAC security and made "root" filesystem changes without generating UAC prompts. Of course these can be negated (providing there's no other serious hole in UAC) by bumping UAC settings up to force prompts to occur all the time, which is how it should be.

Sadly, too many people who are incapable of safely using their PCs either ignore the prompt and just accept it (passwords would reduce the occurrence of this), or simply disable UAC altogether.

 

[paulthepwner]

[citation][nom]Camikazi[/nom]But, is it enough to satisfy a woman?[/citation]

Heh is anything really enough to satisfy a woman? Go out and make a million dollars and she'll want 2. Give her 8 inches and she'll want 10. Get her a dog and all the sudden she'll want a kid.

 

[WyomingKnott]

[citation][nom]Renegade_Warrior[/nom]Here is more Detailed information on this SPAM Vector.(reply #345 of SPAM frauds, fakes, and other MALWARE deliveries... Thread)[/citation]
With all due respect to Renegade_Warrior, after reading this article I am extremely unlikely to click on the link!

 

[Cyex]

[citation][nom]bv90andy[/nom]I never touch e-mail with "xxx person invites you to take this test".[/citation]Yeah, those xxx people are always bad news.

 

[Guest]

Camikazi 09/11/2010 11:06 PM Hide -0+

Shadow703793 :

lol. +1. Btw, any one who pay for pr0n is an idiot. There is too much free pr0n on the interwebs to satisfy a man for 20 life times.

But, is it enough to satisfy a woman?

Hahaha...we are never satisfied

 

[thearm]

[citation][nom]NoCaDrummer[/nom]I presume that this only affects Windows PCs. As usual, the scare sounds generic, but probably isn't. When are folks going to get wise to the problems with Windows?[/citation]

Not that you're going to read this or even care (fanboy?), but the only problem Windows has is that it's popular. If other OS's where as popular, flaws in it would be exploited as well. A virus writer has very little to gain by writing a virus for Linux as opposed to Windows.