Monday, April 14, 2014

Heart Bleed bug test

The  Heart Bleed bug has been causing serious security issues across the globe over the past week, potentially affecting sites that million of internet users log into every single day.


However, now there is a virus test that can help users detect whether a specific website has updated itself to eliminate the bug, and if so users would have the green light to change their passwords and update their security measures to protect themselves.

photo of a computer screen with http protocol and www domain, url, website address


The Heart Bleed virus test can be found on filippo.io by clicking here.

This is important because even though users have been advised to change their passwords across sites they use, this measure would be completely useless, and could even detrimental to users, if they did so before the website in question eliminated the security threat.
So users should visit the filippo website and check any website they are looking to change their password on.
A list of affected websites can also be found on GitHub.com by clicking here.
The Heart Bleed bug has reportedly put millions of passwords, credit card numbers and other private data online at risk.
The virus affects a widely used encryption technology that was supposed to protect online accounts. However, a flaw was recently found – one that could be exploited maliciously by those wanting to steal data, and potentially financial information from millions of users.
Some experts believe the threat could have gone undetected for more than two years, and many are concerned that hackers could have been secretly exploiting the flaw for a long time even before the problem was discovered.

Thursday, September 5, 2013

Tuesday, August 6, 2013

AVG

hreat Info



Downadup/Conficker worm

First version of this worm is known from december 2008. Nowadays it has 300+ several variants. More information could be found in Virus Lab Blog.
January 22, 2009


I-Worm/Nuwar

Propagation method of new Nuwar variant is still similar to its precedessors. Spammed mails with link in IP format directs users to the worm web pages where the users are prompted to download one of the worm files with the name funny.exe. Names of other downloadable files are kickme.exe and foolsday.exe. AVG detects this threat as I-Worm/Nuwar.R.
March 31, 2008


I-Worm/Nuwar

New Nuwar variant spreading method is similar to Nuwar.L last month propagation. Spammed emails are brief containing link in IP format to currently working pages with worm. Compromised page code is changed and and as a result user is prompted to download file with worm. Downloaded filename is valentine.exe it's about 110 - 130kB long and it's detected by AVG as I-Worm/Nuwar.N
February 14, 2008


I-Worm/Nuwar

We have a new wave of spammed mail messages containing link directing users to website where the worm could be downloaded. Emails contains short text and IP address of currently working pages with worm. In this case downloaded filename is withlove.exe and it's about 115kB in size. Websites and worm files changes every few minutes. AVG detects withlove.exe as I-Worm/Nuwar.L.
February 14, 2008


Win32/Mabezat.A

In last few days we`ve registered a larger amount of PE files infected by this virus. Win32/Mabezat is polymorphic file infector which infects PE files. More information could be found in our Virus Encyclopedia.
November 14, 2007


Downloader.Tibs

A new Downloader.Tibs variant is spreading today thanks to massive spamming. Infected emails contains about 130-140kB long attachment, usually with name happy2008.exe, which is trojan horse itself. There are also emails with links directing users to a malicious web pages. The files are already detected as Downloader.Tibs.
February 14, 2008


Trojan Downloader.Agent.UZM

A new Trojan Downloader was spammed today. Trojan is attached in zip archive to emails in HTML format with subject "Hot game" and body text that claims some Angelina Jolie or Lara Croft undressing game. xgame.zip attachment contains xgame.exe (20992B) which drops executes and deletes kernel driver C:\WINDOWS\System32\drivers\runtime.sys and downloads another downloader smartdrv.exe. runtime.sys runs injects and hides Iexplore.exe process and downloads another components. xgame.exe is detected as Trojan Downloader.Agent.UZM, smartdrv.exe is detected as Trojan Downloader.Agent.UZN, runtime.sys is detected as Trojan Downloader.Agent.THW and other downloaded components are detected as several variants of Trojan Backdoor.Ntrootkit.
November 10, 2007


I-Worm/Stration downloader

Next Stration downloader variant spreads by email in messages with randomly generated subject and body with two attachments. PDF attachment is harmless but EXE attachment which is 18708B long is downloader itself and AVG detects it as I-Worm/Stration. More information about Stration worm familly can be found in the Virus Encyclopedia.
November 5, 2007


I-Worm/Stration downloader

Latest Stration downloader spreads by email in messages with randomly generated subject and body with one EXE and one PDF file attached. EXE file is 20992B in size and it`s downloader itself which is detected by AVG as I-Worm/Stration.FJA. The file downloader tryes to download is already detected as I-Worm/Stration. More information about Stration worm familly can be found in the Virus Encyclopedia.
November 1, 2007


becare

Tuesday, May 12, 2009

AV