Virus Advisory
Moderator: S2k Moderators
Virus Advisory
W32/Zafi.b@MM is a Medium Risk mass-mailing worm that spreads via email and peer-to-peer applications.
When spreading via email, the worm will both spoof the sender's From address and send itself out in different languages depending on the top level domain of the recipient's email address. For example, if the address ends in .COM, the virus's email body will appear in English. If the address ends in .DE, the email will appear in German.
The worm also attempts to cripple anti-virus and firewall software installed on a user's system by locating and overwriting a user's security software with copies of itself. Furthermore, the worm will attempt to thwart manual detection by terminating key Windows processes.
Up-to-date McAfee VirusScan users with DAT 4366 are protected from this threat.
When spreading via email, the worm will both spoof the sender's From address and send itself out in different languages depending on the top level domain of the recipient's email address. For example, if the address ends in .COM, the virus's email body will appear in English. If the address ends in .DE, the email will appear in German.
The worm also attempts to cripple anti-virus and firewall software installed on a user's system by locating and overwriting a user's security software with copies of itself. Furthermore, the worm will attempt to thwart manual detection by terminating key Windows processes.
Up-to-date McAfee VirusScan users with DAT 4366 are protected from this threat.
0 likes
-
- Category 5
- Posts: 15941
- Age: 57
- Joined: Fri Oct 11, 2002 8:11 am
- Location: Galveston, oh Galveston (And yeah, it's a barrier island. Wanna make something of it?)
-
- Category 5
- Posts: 3453
- Age: 55
- Joined: Sun Oct 27, 2002 4:11 pm
- Location: Southern Maryland
- Contact:
- Skywatch_NC
- Category 5
- Posts: 10949
- Joined: Wed Feb 05, 2003 9:31 pm
- Location: Raleigh, NC
- Contact:
- Aquawind
- Category 5
- Posts: 6714
- Age: 62
- Joined: Mon Jun 16, 2003 10:41 pm
- Location: Salisbury, NC
- Contact:
ColdFront77 wrote:I'm still not sure why my Norton Antivirus program list doesn't update either manually or via the popup window.
I downloaded and installed the new files from the Norton Antivirus website twice; both times the updates were for the exact same day.
Hey, What version of Norton is it? Is it a bundled package?
0 likes
Re: Virus Advisory
Lindaloo wrote:W32/Zafi.b@MM is a Medium Risk mass-mailing worm that spreads via email and peer-to-peer applications.
When spreading via email, the worm will both spoof the sender's From address and send itself out in different languages depending on the top level domain of the recipient's email address. For example, if the address ends in .COM, the virus's email body will appear in English. If the address ends in .DE, the email will appear in German.
I think that is what has been haunting my e-mail server the past month. I would receive subjects like "mail failure...". The neat thing about MS Outlook is that about 80% of the time, it denies me access to the attachment which is designated as "Potentially harmful and dangerous". Even when it does not block it, I don't open the attached .zip file. These files find their way to the delete bin fairly quickly!

Thanks Linda!

0 likes
ColdFront77 wrote:I'm still not sure why my Norton Antivirus program list doesn't update either manually or via the popup window.
I downloaded and installed the new files from the Norton Antivirus website twice; both times the updates were for the exact same day.
Aquawind wrote:Hey, What version of Norton is it? Is it a bundled package?
I don't know if it is bundled or not. I don't believe I have had it a year yet.
Installations from the downloads are apparently working.
0 likes
- Aquawind
- Category 5
- Posts: 6714
- Age: 62
- Joined: Mon Jun 16, 2003 10:41 pm
- Location: Salisbury, NC
- Contact:
Clicking on the icon down by your clock or the shortcut on your desktop will open the program and tell you the year/version.
It will also list the Virus Definitions with the date of the last update.
The Subscription Service will tell you how long you can get updates.
Just so the updates are taking and it can complete a full system scan things should be fine..
The latest is Norton Antivirus 2004..its came out in September of 2003..it does have a major slowdowns/quirks with older Pentium II machines in particular..
Antivirus 2003 is supported for 2 years.. before the Subscription runs out you will be prompted to extend the subscription for like $20 or upgrade to the new version of course..
Actually my subscription for 2003 runs out this week..I really wanna wait till 2005 comes out this fall but that is taking a big chance these days..
Get Professional Edition if you have 2 PCs it has a 2 user license and is cheaper than buying 2 Standard Editions..
It will also list the Virus Definitions with the date of the last update.
The Subscription Service will tell you how long you can get updates.
Just so the updates are taking and it can complete a full system scan things should be fine..

The latest is Norton Antivirus 2004..its came out in September of 2003..it does have a major slowdowns/quirks with older Pentium II machines in particular..
Antivirus 2003 is supported for 2 years.. before the Subscription runs out you will be prompted to extend the subscription for like $20 or upgrade to the new version of course..
Actually my subscription for 2003 runs out this week..I really wanna wait till 2005 comes out this fall but that is taking a big chance these days..
Get Professional Edition if you have 2 PCs it has a 2 user license and is cheaper than buying 2 Standard Editions..

0 likes
Who is online
Users browsing this forum: No registered users and 9 guests