Gerade tickerte mir folgende Meldung ins Postfach:
| Zitat: |
...
Summary
--------
VBS.Inker.B@mm is a mass-mailing.worm that changes icons, swaps mouse
buttons, and lowers computer secuirty settings.
Executable Types
-----------------
File / Interpreted / VBScript (VBS)
Infection Vectors
------------------
File Transfer / Email Attachment
File Transfer / IRC DCC
File Sharing / Peer to Peer / Kazaa
File Sharing / Peer to Peer / Morpheus
File Sharing / Peer to Peer / Grokster
File Sharing / Peer to Peer / Bearshare
File Sharing / Peer to Peer / ICQ File Sharing
Impact
-------
Payload:
Swaps the mouse buttons, disables the desktop display, and changes icons.
Payload:
Lowers security settings by terminating security related processes and
deleting security-related files and folders.
Payload:
Lowers security settings by blocking access to security-related Web sites. Collateral Damage: Creates a mass-mailing of itself which may clog mail servers or degrade
network performance.
Collateral Damage:
Creates a mass-mailing of itself which may impact system performance.
Symptoms
- --------
Presence of some or all of the following files: %Windir%\Ipnuker.vbs %Windir%\IeCrash.html %Windir%\system32\Iexploit.html %Windir%\CreateUser.vbs %ProgramFiles%\Script.ini
The desktop is no longer visible.
The mouse buttons have had their functions swapped.
The registered owner has changed to Ipnuker.
Presence of shortcuts with the name Ipnuker.
...
The mail has the following characteristics:
Subject:
Hotmail Password Finder Downloads
Message:
The Attached File Is A Hotmail Password Finder
This Is A 100% Free Full Version And Is Easy To Use Just Follow The
Instructions.
This Tool Is Illegal So Use It With Caution Please Enjoy.
Attachment:
Ipnuker.vbs
... |
|
'Netter Versuch', den Empfängern zu suggerieren, sie würden da ein verbotenes Tool erhalten...
Edit:
Quellenangabe vergessen.
