*

Recent Posts

Welcome, Guest. Please login or register.
November 14, 2024, 12:04:11 PM

Login with username, password and session length

Members
  • Total Members: 61
  • Latest: AciDeX
Stats
  • Total Posts: 28505
  • Total Topics: 1915
  • Online Today: 315
  • Online Ever: 569
  • (August 02, 2024, 06:20:39 AM)
Users Online
Users: 0
Guests: 305
Total: 305

Permissions

Author Topic: VIRUS ADVISORY - W32/Lovgate.ab@MM  (Read 1973 times)

0 Members and 1 Guest are viewing this topic.

Offline ZWarrior

  • Administrator
  • Hero Member
  • *****
  • Posts: 7798
  • Karma: 8
  • Shhh! Be wery wery qwiet...
    • View Profile
    • Ambush!
VIRUS ADVISORY - W32/Lovgate.ab@MM
« on: May 19, 2004, 08:56:43 AM »
------------------------------------------------------------
     ** VIRUS ADVISORY - W32/Lovgate.ab@MM **
------------------------------------------------------------

W32/Lovgate.ab@MM is a Medium Risk mass-mailing worm inside an email attachment that when
run:

1. Drops a dangerous backdoor on an infected machine that can allow a remote hacker to steal information.
2. Infects executable programs.
3. Tries to disable anti-virus and security software.
4. Emails itself to a) stolen contacts or b) as replies to unread MS Outlook or Outlook Express messages on the infected machine, spoofing the "from: field".

Note: McAfee VirusScan proactively detects and blocks W32/Lovgate.ab@MM's backdoor component (BackDoor-AQJ).

------------------------------------------------------------
WHAT TO LOOK FOR:

FROM: Varies (forged addresses taken from infected system).

SUBJECT: Re: (original subject)

BODY: Varies.

ATTACHMENT: The worm may be attached with one of the following file extensions:
 
-EXE
-SCR
-PIF
-CMD
-BAT

When replying to unread Outlook or Outlook Express messages, the worm may be attached with a variety of filenames. Examples:

-the hardcore game-.pif
-Sex in Office.rm.scr
-Deutsch BloodPatch!.exe
------------------------------------------------------------  

Up-to-date McAfee VirusScan users with DAT 4361 are protected from this threat.
 
Learn More about W32/Lovgate.ab@MM:
==> http://us.mcafee.com/root/campaign.asp?cid=10244
 
Scan for W32/Lovgate.ab@MM:
==> http://us.mcafee.com/root/campaign.asp?cid=10245

[Edited on 5-19-2004 by ZWarrior]
--------------------------------
Zoƫ: Shepard, isn't the Bible kind of specific about killing?
Book: Very specific. It is, however, somewhat fuzzy around the area of kneecaps.

 

Contacts