Holy crud -- I got a message about a disaster in China that has
killed "millions", and a web site to see video. At that point I was
offered beijing.exe, which clam didn't know about as of an hour
ago. So its definitely spreading.
--STeve Andre'
On Thursday 26 June 2008 11:15:59 Joe Budzyn wrote:
> If it is the one I just saw "Antivirus 2008", it came with a video codec.
>
> Joe
>
> On Thu, Jun 26, 2008 at 11:09:52AM -0400, Chris Wolf wrote:
> > Does anyone know what specific vulnerability is being
> > exploited here? Were the computers involved completely up-to-date with
> > MS patches and still got infected?
> >
> > From: MSU Network Administrators Group
> > [mailto:[log in to unmask]] On Behalf Of Bosman, Don Sent:
> > Thursday, June 26, 2008 10:07 AM To:
> > [log in to unmask] Subject: Re: [MSUNAG] XP or Vista Antivirus 2008
> > ..... Here is one mechanism of infection
> >
> > I
> > always accepted users comments that they didn’t know how they got
> > infested because its generally the truth. I didn’t understand how
> > they couldn’t have noticed that their machine had slowed, but even
> > on campus the network can get frustratingly slow at times. Now that it
> > happened to me, I can tell you one way to get it. Using MSIE, browse to a
> > recommended site from a news aggregator who has never let you down in the
> > past. After thirty seconds or so your machine slows to the point that any
> > tech knows it’s been infested. There are thousands of sites that
> > are harboring mal-ware scripts. I know I should have been using Firefox,
> > but for some reason I was in IE.
> >
> > For
> > my home machine running online scans offered by both
> > www.antivirus.com (Trend Micro) and
> > http://www.kaspersky.com/virusscanner
> > (Kaspersky Labs) cleaned up the problem. While not requiring much
> > interaction from me, the scan process did take hours.
> >
> > Here
> > at work I used to trust HitmanPro II
> > http://www.hitmanpro.nl/hitmanpro/
> > but even it hasn’t been catching the latest script installed
> > malware.
> >
> > Best
> > practice as of today – Run Firefox or Opera with scripting turned
> > off. I was amazed at the number of everyday sites that require scripting
> > to do simple things that could have been better coded. Now I generally
> > recover data from another profile and re-image the machine.
> >
> > Good
> > luck.
> >
> > Don
> > Bosman
> > Information
> > Technologist
> > Libraries,
> > Michigan State University
> >
> > 100 Library
> >
> > East Lansing, MI 48824-1048
> >
> > [log in to unmask]
> >
> > (517) 432-6123 ext 233
> >
> > Fax (517) 432-8374
|
