Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)
-   -   W32/Wallon.worm (https://www.cableforum.uk/board/showthread.php?t=12359)

kronas 14-05-2004 18:12
W32/Wallon.worm
 
Quote:
W32/Wallon-A is an email worm. The worm sends mail containing a deceptive link. The link appears to direct the user to drs.yahoo.com/<user's domain>/NEWS but in fact points to a location on another website.
The website that the user is directed to utilises Trojan downloaders and exploits to download and run a copy of W32/Wallon-A.

The Trojans used and installed during the infection process are:
Troj/Psyme-V, Troj/StartPa-HF, Troj/Dloader-JK and Dial/Top69-A.
sophos:

http://www.sophos.com/virusinfo/anal...32wallona.html


symantec: in depth removal and exploitation information of microsoft patches:

MS04-004 and MS04-013

http://securityresponse.symantec.com...llon.a@mm.html

homealone 14-05-2004 18:15
Re: W32/Wallon.worm
 
ah that reminded me to update my AV - thanks Kronas :tu:

paulyoung666 14-05-2004 18:51
Re: W32/Wallon.worm
 
Quote:
Originally Posted by homealone
ah that reminded me to update my AV - thanks Kronas :tu:

and me too :)


All times are GMT. The time now is 17:48.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum