Mobler 'super devastating' computer worm is back!
Security firm F-Secure warned that there was a "ancient" computer worm called Mobler reappearing and spreading on the Internet.
Once infected on the system, the Mobler worm copies a copy of it to all the system's writable storage devices such as floppy disks, USB memory sticks and some other folders on the hard drive.
Therefore, one of the signs to identify a Mobler worm system is that the floppy drive automatically activates even if there is no disk in the drive.
However, this worm needs to have the impact of users, it will begin to promote its disastrous ability.
The Mobler worm also hides itself in the Windows directory and can host a denial-of-service attack. The first victim of this denial-of-service attack is the Bina Sarana Informatika website.
Not only that, every time a copy of it is copied to another place, it is renamed to avoid detection. Even the files in the infected folder will be renamed.
The Mobler worm released some files to the Windows System folder such as autorun.inf , black.app , black.html , black.ico , black.jpg , black.txt , makesis.exe and system.exe . Also in this folder, the Mobler worm will create some compressed files such as Black_Symbian.SIS and Black_Symbian.PKG .
Once infected on your computer system, the worm Mobler also disables the Windows Task Manager and Registry tools, Folder Options and Search or the ability to block some application files from being started by RUN .
Security vendor warns users not to open messages with attachments and unknown sources or run any suspicious software on storage devices such as USB sticks or floppy disks.
Trang Dung
You should read it
- Many Vietnamese networks are attacked by Tro_small
- D32 Virus Removal Software updates new viruses on December 25, 2004
- Collection of more than 90 black wallpapers for computers and laptops
- 10 interesting facts about black holes in the universe (Part 1)
- Scabby hair with a 3 meter long sea worm has extreme hunting
- Discover the most bizarre black holes in the mysterious space universe
- Will the Kama Sutra worm come back next week?
- D32 antivirus software continues to update new viruses on January 20, 2005
May be interested
- Sophos alert for 'webcam trojans'security firm sophos has warned of hackers using webcam spyware to steal sensitive information from victims' machines, then threaten them with information.
- Many 'victims' have not been able to kill YM virus properlyalthough the hanoi university of technology bkis network security center insists on updating 9 'made in vietnam' worms into the latest bkav version, many people still cannot destroy them. the reason is that the procedure & quitting has not been done properly
- The Trojan Fire Zero-Day attacks Microsoft Wordattackers are exploiting the latest patch that has not been patched in microsoft word 2000. security experts warn of a growing threat.
- Samsung website contains Trojansecurity firm websense has warned that the official website of samsung electronics in the us contains malware (malware). it is a trojan capable of recording keyboard activity, disabling anti-virus applications, fixing registry and recording c
- Malware 'crawls' to hide the barriera trojan horse program has been designed to hurt machines that use microsoft windows' encrypted file system. the trojan will 'crawl' into the payload of the system and hide the protection program - warning by a researcher.
- A Sony PlayStation attack virus appearssecurity firm panda software warned that sony's playstation portable handheld game device could also be attacked by malicious code. panda said the malicious code was proven to be capable of attacking sony's handheld gaming device via the above security error.