Forum Articles
  Welcome back Join CF
You are here You are here: Home | Forum | Nortons vulnerability

You are currently viewing our boards as a guest which gives you limited access to view most of the discussions, articles and other free features. By joining our Virgin Media community you will have full access to all discussions, be able to view and post threads, communicate privately with other members (PM), respond to polls, upload your own images/photos, and access many other special features. Registration is fast, simple and absolutely free so please join our community today.


Welcome to Cable Forum
Go Back   Cable Forum > Computers & IT > Security & Virus Discussion
Register FAQ Community Calendar

W32/Wallon.worm
Reply
 
Thread Tools
Old 14-05-2004, 18:12   #1
kronas
Inactive
 
kronas's Avatar
 
Join Date: Jun 2003
Location: heckmondwike
Age: 40
Posts: 10,767
kronas is cast in bronzekronas is cast in bronzekronas is cast in bronzekronas is cast in bronze
kronas is cast in bronzekronas is cast in bronzekronas is cast in bronzekronas is cast in bronze
W32/Wallon.worm

Quote:
W32/Wallon-A is an email worm. The worm sends mail containing a deceptive link. The link appears to direct the user to drs.yahoo.com/<user's domain>/NEWS but in fact points to a location on another website.
The website that the user is directed to utilises Trojan downloaders and exploits to download and run a copy of W32/Wallon-A.

The Trojans used and installed during the infection process are:
Troj/Psyme-V, Troj/StartPa-HF, Troj/Dloader-JK and Dial/Top69-A.
sophos:

http://www.sophos.com/virusinfo/anal...32wallona.html


symantec: in depth removal and exploitation information of microsoft patches:

MS04-004 and MS04-013

http://securityresponse.symantec.com...llon.a@mm.html
kronas is offline   Reply With Quote
Advertisement
Old 14-05-2004, 18:15   #2
homealone
Guest
 
Posts: n/a
Re: W32/Wallon.worm

ah that reminded me to update my AV - thanks Kronas
  Reply With Quote
Old 14-05-2004, 18:51   #3
paulyoung666
Permanently Banned
 
paulyoung666's Avatar
 
Join Date: Jun 2003
Location: norton , teesside
Age: 58
Posts: 10,571
paulyoung666 has a nice shiny star
paulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny starpaulyoung666 has a nice shiny star
Re: W32/Wallon.worm

Quote:
Originally Posted by homealone
ah that reminded me to update my AV - thanks Kronas

and me too
paulyoung666 is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 17:40.


Server: lithium.zmnt.uk
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum