DENBEECKMAN'S BLOG !!"
Alvast bedankt voor je bezoek !!!
Klik op de afbeelding in het geel-bruine kader !! Ook in de linker of rechter kolon , om naar een site te gaan.Niet!!op de linker-midden of rechter achtergrond animaties!!
VirusAlert ziet op dit moment een grote toename van de internetworm Sober.x.
Wij hebben het ontvangstriscio opgewaardeerd naar medium, vandaar deze alert-nieuwsbrief.
Verschillende antivirusfabrikanten hebben inmiddels updates beschikbaar. Wij adviseren u
z.s.m. uw antivirussoftware bij te werken met de laatste updates zodat he virus automatisch wordt gefilterd.
Sober.x komt in uw mailbox binnen omdat het zich doorstuurt naar alle contacten in het adressenboek van een geinfecteerde computer.
Dit kan dus ook een adressenboek zijn met daarin uw e-mailadres.
Het virus wordt geactiveerd door het bijlagebestand (handmatig) te openen. Doet u niets en opent
u deze bijlage niet dan loopt u geen gevaar. Wij adviseren u om direct het mailtje te verwijderen.
Meer informatie over het virus en hoe te herkennen vindt u op:
http://www.virusalert.nl/?show=virus&id=1249&name=W32.Sober.x@mm
SPECIAL SECURITY ALERT
We apologize for sending you another email so soon, but we felt this was important for your computer's security.
--------------------------------------------------------------------------------
Instant Messenger RootKit Worm Tied to Worldwide Bot Network Controlled by Group in Middle East
FaceTime Communications Warns Customers and Federal Authorities of New Threat
Foster City, CALIF November 17, 2005 - Experts at FaceTime Security Labs , the threat research division of FaceTime Communications, identified and reported a new threat today related to the AOL Instant Messenger (AIM) RootKit worm they first identified on October 28, 2005. New research completed on the AOL rootkit worm confirms it acts as a back door for additional malware to be downloaded. The additional malware is capable of stealing usernames, passwords, and other personal information, and can be managed and controlled by a hacker through IRC communication sessions.
FaceTime security researchers confirmed that computers infected with the lockx.exe rootkit file are being further compromised by a group in the Middle East. The attackers have compromised multiple servers hosted by ISPs worldwide to distribute the malware payload. The additional malware includes a ster.exe file that contains six additional files to provide the attacker with the capability to upload, download, and monitor the infected host PC. It has also been found that the malware has the potential to steal Microsoft Outlook Express email passwords and log keystrokes. The infected computers can also be used as a platform for launching attacks on Web sites or networks.
Who is affected: All users who have been infected by the lockx.exe rootkit or its variants are at most risk. Users of other messaging applications may also be affected by the ster.exe payload as it can be distributed by the lockx.exe infected PCs. All PC users can initiate a free online scan which can detect and disable the lockx.exe file by visiting: www.facetime.com
Additional Information:
The lockx.exe rootkit and its variants connect to an IRC server, where it is capable of receiving instructions through private, automated messages from an IRC operator. These messages can open a browser session or install an unwanted application
Over 17,000 users were found to be compromised on a single server, and multiple servers exist worldwide
Users may receive the instant message text consisting of:
evilday.us/pic####.com, or
how do I look[ipaddress]/~q8army/pic0023.com which links them to one of multiple worldwide servers to deliver additional malware
Additional malware includes self-extracting zip files including a Ster.exe file which utilizes the compromised machine to deliver multiple payloads that:
Can steal your browser auto-complete data which may leak confidential personal information
Gain access to Microsoft Outlook Express
Open browsers to launch a denial of service attack, and/or
Download additional malicious applications
We have delivered detailed research information to the U.S. federal authorities and are fully cooperating with their efforts, said Kailash Ambwani, president and CEO of FaceTime Communications. This army of bots could be used for any number of malicious purposes including a denial of service (DoS) attack against targeted Web sites.
FaceTime Customers Can Prevent This Threat
FaceTime Enterprise Edition and IMAuditor customers can proactively block these malicious threats and prevent infections before they happen by blocking downloads of the specific executable files associated with the threat. FaceTime also recommends activating the Day Zero Defense System within IMAuditor 6.5. The system utilizes anomaly detection techniques to analyze multiple characteristics of IM-borne worms and other malicious code against normal behavior, and provides patent-pending protection against these threats without the need for traditional security signatures. FaceTime RTGuardian customers are automatically protected if they have auto update features enabled. FaceTimes X-Cleaner customers (formerly XBlock) should download the latest update and scan their PC to detect and remove
http://www.facetime.com/
DENBEECKMAN
<
95 berichten
mooi
een prachtig blog mooi inelkaar gestoken
haaaai
grtjs jef
hallo
blog
blog
lief
Piep
Hallo
dorst
ezoeker t'was champagne van een bekent merk.groetjes
Hallo
Viva & Dréke
Hey, Beeckman
Groetjes van Bomma
virussen
arjuist nog een bezoekje gedaan daar waren er 40 virussen ge moet dat niet willen jong(grapje)ik hoop dat alles ok komt voor u want je hebt een tof blog.
piepen
Plezant hier!
Groetjes
jenthe
Cool Stuff
knap,hoor!
goe bezig
Mooi
jawadde
amaai...
boodschap
schap vinden?
java
blog seniorennet
u blog
schoon blog
blog
Graaf werk
Hallo,
Groetjes van Bomma,
koekoek
Goede site
Groetjes, poeske
Magnifiek
src="http://img122.imageshack.us/img122/22/goud1pn.png">
prachtig
src=" http://img328.imageshack.us/img328/2425/liebguck3129673om.gif">
mooi
groetjes sonia
hallo
leuk om op rond te neuzen.
groetjes ria53 (onder familie)
Prachtig
Leuke site
Een leuke site met interresante links.
Doe zo verder.
Vriendelijke groetjes
Maurice
amaai Beeckmanneke !
Ik ben nen échte tirolzot !
Blij dat ik je gevonden heb.
Zelfs oostenrijkse muziek kan swingen hé !
Op mijn blogske kun je véél bergen zien hoor.
Klik gewoon op
Hallo ;-)
Proficiat en doe zo verder hoor!
Groetjes Ronny
http://blog.seniorennet.be/kruidenhoekje
Proficiat
Hier kan ik uren rondkijken. Wat je hier kan vinden aan informatie is ongelooflijk. Een prachtig idee om allerlei sites samen te brengen. Doe zo voort.
Jenthe
interressant!
Amusement
Wens je nog veelsucces toe.
De groeten.
kwizientje
Ik kom zeker regelmatig terug.
Groetjes
Carine