|
|
|
|
 |
Seeing as recent viruses have us all stumbling around and Virus Hoaxes seem about as common as Windows security/critical updates (very in other words  ) I thought I'd post up information on Viruses.
Until I realised Sophos AV does it all for me and has RSS feeds available for websites etc to use... so without further delay I point you to the Virus/Hoax Information page.
The page contains the latest 10 viruses to be discovered, the 10 top virus Hoaxes and the 10 'most reported' viruses for the previous month (aka the list of viruses that 'screwed up your computer last month' )
You should also see the link in the 'Community' section of your navigation bar.  |
| Pash |
  Posted 19th Aug 2003 9:45pm |
L4Y Member
Post 0 / 29
 |
A great addition to the site and very much appreciated.  |
|
|
| Himself UKSF |
Posted 19th Aug 2003 10:04pm |
L4Y Member
Post 0 / 11
 |
Just found on the BBC website this information from a virus discovered today or at least F strain of it.
Thought Id share it with you all
New web worm tackles bugs
The new worm targets Windows XP
Another Windows worm is on the loose, but this one tries to help rather than hinder.
The Welchi or Nachi worm is using the same trick as last week's disruptive MSBlast virus to travel around the net but tries to fix vulnerable machines rather than exploit them.
The Nachi worm tries to automatically apply the software patch issued by Microsoft to secure machines against the attentions of MSBlast.
If the Nachi virus finds the MSBlast worm on a PC it removes the malicious program.
"The writer of the Nachi worm may want to be seen as the Dirty Harry of the internet world, cleaning up malicious MSBlast code wherever it is found," said Graham Cluley, senior technology consultant at anti-virus firm Sophos.
Aid program
Last week many thousands of net connected Windows PCs fell victim to the MSBlast worm which exploited a month old security loophole to infect machines.
Since it made its appearance, the MSBlast worm is thought to have infected more than 500,000 machines.
Many machines were due to launch a denial-of-service attack on Microsoft's Windows Update site on Saturday but the software giant said it had managed to dodge the assault.
In the wake of MSBlast, the Nachi worm is prowling the net looking for machines with the vulnerability exploited by the more disruptive program.
Once it finds a vulnerable machine, Nachi tries to download the patch Microsoft created to make PCs invulnerable to MSBlast-type viruses.
Nachi also tries to put the correct language version of the patch to any machine it has reached.
MSBlast targeted many different versions of Windows, but Nachi only seeks out and fixes vulnerable machines running Windows XP.
The worm will also uninstall itself after 1 January 2004.
The Nachi/Welchi worm was described as an "anti-virus virus" by Mikko Hypponen, director of anti-virus research at security firm F-Secure.
"We've seen similar things before, but not to the extent of actually applying Microsoft's own patches to the system," he said.
"Unfortunately Welchi is not perfect and will create some additional problems."
He said the Welchi/Nachi worm could cause problems because it was untested, installed itself automatically, had the potential to cause compatibility problems and created lots of unwanted net traffic.
 |
|
|
Garner  |
Posted 19th Aug 2003 10:12pm |  |
Post 0 / 4125
 |
Yeah, the F variant is actually a different virus 'Sobig-F'
The guy who came up with that seems to have kick started it off using the same ideas as spammers. I've recieved no less than 80 emails in the last 2 hours from people that are already infected by this.
Everyone, PLEASE update your virus definitions! My 56K takes a little while to download 80 virus infected emails 
-
The Nachi worm is just trying to help out by informing still unpatched idtiots erm users that they need to do it. The fact that the worm tries to patch the OS itself is a little worrying... if it just popped up and said 'oi! you're not patched yet! go get it now!' then it wouldn't be so bad... |
"Science is this extraordinary transnational, transcultural, trans-everything language which is the only way to discover Truth and its regrettable that billions are still stuck in the Middle Ages believing the crap propagated by Popes and priests..."
- Peter Atkins |
Modified Aug 19th, 10:14pm by Garner |
|
| NoClanFrank |
Posted 19th Aug 2003 10:44pm | |
Post 0 / 5840
 |
Got it at work, and yesterday we had no Internet connections at all. I saw it and it recommends to delete it, but I can't since I don't have adminstration power. Business Enterprise has been informed but they might not get to us from at least a week.  But I can still surf the net.
|
| >Click Here< If You Don't Have a Social Life :/ |
|
|
| RHF |
Posted 19th Aug 2003 10:51pm | |
L4Y Member
Post 0 / 676
 |
Cleared both the SoBig, and the Blaster worm off of a machine that came into work today.. and am getting bombed by it constantly now.. strange virus! |
|
|
|
|
