CAUTION: Lots of new Warezov worms!

system · 2006-10-23T13:06:08.000Z

Hi,
2 new samples came in by e-mail today (undetected by avast). A friend of mine received another one, different than mine.
DO NOT CLICK ON E-MAIL ATTACHMENTS if you are not 100% what they are!
Here are the e-mails I received:

Subject:
Mail Delivery System

Body:
Mail transaction failed. Partial message is available.

Attachment:
readme.msg.exe

Subject:
Mail server report.

Body:
Mail server report.

Our firewall determined the e-mails containing worm copies are being sent from your computer.

Nowadays it happens from many computers, because this is a new virus type (Network Worms).

Using the new bug in the Windows, these viruses infect the computer unnoticeably.
After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail
addresses

Please install updates for worm elimination and your computer restoring.

Best regards,
Customers support service

Attachment:
Update-KB2843-x86.zip

system · 2006-10-23T18:30:42.000Z

I keep getting email like this and have no idea who this joe ? is. I also received an email from avast in regards to this email. Does anone else get email from avast?
I keep deleting this email and keep getting it too.
What is it?

system · 2006-10-23T20:24:31.000Z

maggiem post:2:

I also received an email from avast in regards to this email. Does anone else get email from avast?

As far as I know, NO! Are you sure it was a genuine e-mail? (It might have been if you contacted avast costumer care)

maggiem post:2:

What is it?

http://www.avast.com/eng/win32-warezov-family.html

polonus · 2006-10-23T20:50:09.000Z

Hi Spyros,

A new variant of the Stration or Warezov family “Stration DS” has been spotted in great numbers, actually an all high toppling Netsky P from number one ever to second place. Stration first spotted in Thailand, now has been seen in 91 countries in the world, and the first variant had over a 100.000 spottings.
These numbers are achieved because the new varieties are being spawn from already infected machines, adding to the effect this cybergang is after.
See statistics here: http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-29.html
It shows worm-spreading is becoming more and more aggresive.
Also our member NickGolovko reported on the Warezov family, that is why these addenda.

polonus

Announcements