Welcome to MalwareRemoval.com, What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.
"We've received a few reports that readers are receiving what appears to be a new version of the Bagel virus in email this morning. The attachments (so far) appear to be named as a single digit number zip file (eg: "5.zip" or "7.zip") or as a string (eg: "Be_not_jealous.zip") with a payload of "16_05_2005.exe" or "19_04_2005.exe". The .zip file is approximately 18k and is 36352 bytes when extracted. Upon execution, this file will be copied to C:\WINDOWS\System32\winshost.exe and will then fetch another 11k file and place it in C:\WINDOWS\System32\wiwshost.exe The registry key HKLM/Software/Microsoft/Windows/Current Version/Run is then updated to execute this winshost.exe file at boot.
Mytob
"We're also getting reports of a new Mytob virus. It appears that this one may be exploiting the MS05-016 vulnerability"
"During the past hours, we've intercepted a flurry of new Bagle variants; apparently, it's been a busy day for the author, who keeps sending them out."
Users browsing this forum: No registered users and 69 guests
Contact us:
Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.
or at least did not stop me looking at the file.
