Virus info by H4 Inc

Ah bugs, viruses, gnats, even worms, don't you just love the little buggers.. Well?.. Not really, when you have a virus, you feel awful and life can really be miserable.. What happens if your computer gets a bug, you know, one of the man-made ones.. I can guarantee that you will feel awful.. Your computer we don't know how it feels, but I am positive that a W32.Klez infection would put the brakes on your system and have you ranting and raving for a while....

So, let's chat a bit.. Do you know how many viruses, or strains of viruses or mutations there are running around today.. These are Computer viruses now.. Guess!.. Well it does not matter what you guessed or know, within a few days or maybe hours you would have to increase that number by at least one.. What's my point?.. My point is no matter how many there are, our approach and yours has been prevention, say inoculation.. Right?.. Yeah, we are still talking about Computer viruses.. Two products mentioned on another page will serve to provide that inoculation.. You know that saying "Penny wise and pound foolish", don't let it apply to you.. Some virus infections can take hours or days to remove, so consider the charges of tech support, the pain of lost irrecoverable data files and don't forget the work time lost... And, if you strictly use your machine at home for fun and relaxation, then consider the lost pleasure and increased frustration.. Today these virus protection programs are within the vicinity of $100 or less.. So get and install one... If you're having difficulty contact us at H4 Inc...

Be sure to keep your virus program current.. The program manufacturers provide updates to their virus program in the form of DAT files which can be downloaded from the program manufacturer web sites.. We suggest that you regularly, say once a week, at an absolute minimum once a month, check for new virus definition files and update your virus program, whenever there are new updates available..

No:	Virus Name	Date Discovered	Virus Type	Sub-Type
1	Tax Return Hoax	03/14/2003	Hoax	-
2	W32/Bibrog.d@MM	03/13/2003	Virus	Internet worm
3	QDel373	03/13/2003	Trojan	File Deletion
4	W32/DuckTest.worm	03/13/2003	Virus	Worm
5	BackDoor-ARL	03/11/2003	Trojan	Remote access
6	W32/CodeRed.f.worm	03/11/2003	Virus	Internet worm
7	VBS/Fourcourse	03/11/2003	Trojan	VbScript
8	CloseProc Application	03/11/2003	Program	Process
9	PWS-Gfint	03/10/2003	Trojan	Password
10	Demo-Opera	03/10/2003	Trojan	Exploit
11	W32/Nicehello@MM	03/10/2003	Virus	E-mail worm
12	W32/Bibrog.c@MM	03/10/2003	Virus	Internet worm
13	IRC-Pitchfork	03/09/2003	Trojan	Remote access
14	BackDoor-ARG	03/09/2003	Trojan	Remote access
15	W32/Deborm.worm	03/09/2003	Internet Worm	Worm
16	W32/Deloder.worm	03/09/2003	Virus	Worm
17	Backdoor-AFC	03/06/2003	Trojan	Remote access
18	ProcKill-AF	03/06/2003	Trojan	Process
19	MultiDropper-FL	03/06/2003	Trojan	Dropper
20	PhoenixScan application	03/05/2003	Program	Win32
21	BackDoor-AQT	03/05/2003	Trojan	Remote access
22	Downloader-BW	03/05/2003	Trojan	Downloader
23	W32/Bibrog.b@MM	03/05/2003	Virus	Internet worm
24	W32/AimVen.worm	03/04/2003	Virus	Internet worm
25	KeyLog-Kerlib	03/04/2003	Trojan	Spyware
26	Backdoor-AQP	03/03/2003	Trojan	Remote access

Worms, worms and more worms, one old one and one new one. Exactly what is going on here?. You know most of us when we think of worms, actually have visions of going fishing and baiting a hook. Some others who are in a not so terrific state of mind, will think about rotting decaying matter. Well, here’s another thought for that collection, how about bad computer virus. So, what happens when your computer becomes infected by a worm. How about beginning by diving into a little of what’s a worm. A worm is a virus that spreads and infects other systems by replicating itself on other systems and across networks. The two worms featured here, Deloder and CodeRed have many variants. CodeRed like with so many other viruses is still having new strains(variants) discovered daily, even though this worm was initially detected many years ago. The CodeRed worm which is a little older was discovered sometime around the middle of 2001, whereas the Deloder worm was recently discovered in early 2003. A little disclaimer: As you have noticed to date, the information contained here is not meant to be gospel, it is simply intended to be a starting point on your path to virus intelligence, and maybe add some humor to an otherwise sad affair. Access the links to McAfee, Symantec and F-Secure to find additional details and removal tools for these nasty little beggars (Forgive the non technical rant..).

The W32/Deloder.worm is a network worm infecting Windows machines via shares which have a weak password set.. It also installs the remote access tool VNC, thus opening the computer to the outside world.

The W32/CodeRed._.worm spreads through TCP/IP transmissions on port 80. By making use of a buffer overflow condition, the worm is able to send itself as a TCP/IP stream directly to the its intended target, which in turn scans the web for other systems to infect.

It’s unlikely that you would see a CodeRed infection on your Windows 9x workstation as this worm targets IIS systems. Your Win2k system is however vulnerable to both Deloder and CodeRed, so check out the info at the afore mentioned sites on these viruses.

	W32/CodeRed	W32/Deloder
McAfee	worms	grubs
Symantec	crawlers	maggots
F-Secure	larvae	fish-bait

1. Most of the worms which use e-mail to propagate use Microsoft Outlook or Outlook Express to spread. If you need to use Outlook, download and install the latest Outlook security patch from Microsoft. In general, keep your operating system and applications up-to-date and apply the latest patches when they become available. Be sure to get the updates directly from the vendor.

2. When possible, avoid e-mail attachments both when sending and receiving e-mail.

3. Configure Windows to always show file extensions. In Windows 2000, this is done through Explorer via the Tools menu: Tools/Folder Options/View - and uncheck "Hide file extensions for known file types". This makes it more difficult to for a harmful file (such as an EXE or VBS) to masquerade as a harmless file (such as TXT or JPG).

4. Never open e-mail attachments with the file extensions VBS, SHS or PIF. These extensions are almost never used in normal attachments but they are frequently used by viruses and worms.

5. Never open attachments with double file extensions such as NAME.BMP.EXE or NAME.TXT.VBS

6. Do not share your folders with other users unless necessary. If you do, make sure you do not share your full drive or your Windows directory.

7. Disconnect your network or modem cable when you're not using your computer - or just power it down.

8. If you feel that an e-mail you get from a friend is somehow strange - if it is in a foreign language or if it just says odd things, double-check with the friend before opening any attachments.

9. When you receive e-mail advertisements or other unsolicited e-mail, do not open attachments in them or follow web links quoted in them.

10. Avoid attachments with sexual filenames. E-mail worms often use attachments with names like PORNO.EXE or PAMELA_NUDE.VBS to lure users into executing them.

11. Do not trust the icons of attachment file. Worms often send executable files which have an icon resembling icons of picture, text or archive files - to fool the user.

12. Never accept attachments from strangers in online chat systems such as IRC, ICQ or AOL Instant Messenger.

13. Avoid downloading files from public newsgroups (Usenet news). These are often used by virus writers to distribute their new viruses.

Note: The info provided here is extracted from Web sources, notably McAfee and Symantec . Visit these sites if you require more detailed virus info. We merely want to keep you aware of these potentially disruptive and costly threats to your machine's health.. Ask us at H4 Inc. about a virus and we will dive into it..