sábado, 4 de julio de 2009

Beware of virus: Subject of email: Remembering Michael Jackson

http://www.symantec.com/norton/security_response/writeup.jsp?docid=2009-063005-3448-99

Discovered: June 29, 2009
Updated: June 30, 2009 7:20:56 AM
Type: Worm
Infection Length: Varies
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
W32.Ackantta.F@mm is a mass-mailing worm that spreads through removable drives and sends an email that contains an attachment of itself. It may also download potentially malicious files from the Internet.

Protection

  • Initial Rapid Release version June 29, 2009 revision 068
  • Latest Rapid Release version June 29, 2009 revision 068
  • Initial Daily Certified version June 30, 2009 revision 002
  • Latest Daily Certified version June 30, 2009 revision 002
  • Initial Weekly Certified release date July 1, 2009

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: High
  • Payload: Downloads potentially malicious files from the Internet.
  • Large Scale E-mailing: Sends out emails with a copy of itself as an attachment.
  • Compromises Security Settings: Attempts to bypass the Windows Firewall.

Distribution

  • Distribution Level: High
  • Subject of Email: Remembering Michael Jackson
  • Name of Attachment: Michael songs and pictures.zip
  • Size of Attachment: Varies
  • Shared Drives: Attempts to spread through removable drives.
Writeup By: Kaoru Hayash