Win32/Lirva.A (Win32/Naith.A, Win32/Avril.A) a nov∞ i Win32/Lirva.C !!!

Ze sv∞ta je hlßÜen v²skyt viru Win32/Lirva.A (n∞kdy oznaΦovßn jako Win32/Naith.A Φi Win32/Avril.A), kter² se samoz°ejm∞ Üφ°φ elektronickou poÜtou a p°es sdφlenΘ disky. Infikovan² email lze poznat podle p°edm∞tu, kter² m∙₧e obsahovat jeden z nßsledujφcφch °ßdku:

Fw: Avril Lavigne - the best
Fw: Prohibited customers...
Fwd: Re: Admission procedure
Fwd: Re: Reply on account for Incorrect MIME-header
Re: According to Daos Summit
Re: ACTR/ACCELS Transcriptions
Re: Brigade Ocho Free membership
Re: Reply on account for IFRAME-Security breach
Re: Reply on account for IIS-Security
Re: The real estate plunger

T∞lo emailu pak m∙₧e mφt t°i podoby:

  • Avril fans subscription FanList admits you to take in Avril Lavigne 2003 Billboard awards ceremony Vote for I'm with you! Admission form attached below

  • Restricted area response team (RART) Attachment you sent to is intended to overwrite start address at 0000:HH4F To prevent from the further buffer overflow attacks apply the MSO-patch

  • Microsoft has identified a security vulnerability in Microsoft« IIS 4.0 and 5.0 that is eliminated by a previously-released patch. Customers who have applied that patch are already protected and do not need to take additional action. Microsoft strongly urges all customers using IIS 4.0 and 5.0 who have not already done so to apply the patch immediately. Patch is also provided to subscribed list of Microsoft«Tech Support

    V p°φloze se pak nachßzφ jeden z nßsledujφcφch infikovan²ch soubor∙:

    AvrilLavigne.exe
    AvrilSmiles.exe
    CERT-Vuln-Info.exe
    Cogito_Ergo_Sum.exe
    Complicated.exe
    Download.exe
    IAmWiThYoU.exe
    MSO-Patch-0035.exe
    MSO-Patch-0071.exe
    Readme.exe
    Resume.exe
    Singles.exe
    Sk8erBoi.exe
    Sophos.exe
    Transcripts.exe
    Two-Up-Secretly.exe

    Ka₧dΘho 7., 11. a 24. dne v m∞sφci zobrazφ strßnku www.avril-lavigne.com a na ploÜe Windows velk² obrazec s nßpisem "AVRIL_LAVIGNE_LET_GO - MY_MUSE:) 2002 (c) Otto von Gutenberg" vlevo naho°e.

    Jako prevenci doporuΦuji stßhnout veÜkerΘ zßplaty pro Internet Explorer (odkaz vpravo naho°e) a samoz°ejm∞ se vyhnout spouÜt∞nφ neznßm²ch p°φloh !

    Pokud by p°eci jen bylo pozd∞, staΦφ odmazat polo₧ku HKEY_LOCAL_MACHINE / Software / Microsoft / Windows / CurrentVersion / Run "Avril Lavigne - Muse" v registrech. Rßd poradφm na igi@viry.cz.

    ProblΘmy jsou i s variantou Win32/Lirva.C (Win32/Naith.C, Win32/Avril.C) ! LiÜφ se p°edevÜφm v textech p°edm∞tu, t∞la a v nßzvech p°φloh.

    P°edm∞ty:

    Fw: Redirection error notification
    Re: Brigada Ocho Free membership
    Re: According to Purge's Statement
    Fw: Avril Lavigne - CHART ATTACK!
    Re: Reply on account for IIS-Security Breach
    (TFTP)
    Re: ACTR/ACCELS Transcriptions
    Re: IREX admits you to take in FSAU 2003
    Fwd: Re: Have U requested Avril Lavigne bio?
    Re: Reply on account for IFRAME-Security breach
    Fwd: Re: Reply on account for Incorrect MIME-header
    Re: Vote seniors masters - don't miss it!
    Fwd: RFC-0245 Specification requested...
    Fwd: RFC-0841 Specification requested...
    Fw: F. M. Dostoyevsky "Crime and Punishment"
    Re: Junior Achievement
    Re: Ha perduto qualque cosa signora?

    T∞la zprßv (6 verzφ):

  • Network Associates weekly report: Microsoft has identified a security vulnerability in Microsoft IIS 4.0 and 5.0 that is eliminated by a previously-released patch. Customers who have applied that patch are already protected against the vulnerability and do not need to take additional action. to apply the patch immediately. Microsoft strongly urges all customers using IIS 4.0 and 5.0 who have not already done so Patch is also provided to subscribed list of Microsoft Tech Support: Patch: Date
  • Restricted area response team (RART) Attachment you sent to %s is intended to overwrite start address at 0000:HH4F To prevent from the further buffer overflow attacks apply the MSO-patch
  • Avril fans subscription FanList admits you to take in Avril Lavigne 2003 Billboard awards ceremony Vote for I'm with you! Admission form attached below
  • Chart attack active list: Vote fo4r I'm with you! Vote fo4r Sk8er Boi!Vote fo4r Complicated!AVRIL LAVIGNE - THE CHART ATTACK!
  • AVRIL LAVIGNE - THE BEST Avril Lavigne's popularity increases:> SO: First, Vote on TRL for I'm With U! Next, Update your pics database! Chart attack active list
  • Orginal Message

    P°φlohy:

    Resume.exe
    ADialer.exe
    MSO-Patch-0071.exe
    MSO-Patch-0035.exe
    Two-Up-Secretly.exe
    Transcripts.exe
    Readme.exe
    AvrilSmiles.exe
    AvrilLavigne.exe
    Complicated.exe
    TrickerTape.exe
    Singles.exe
    Sophos.exe
    Cogito_Ergo_Sum.exe
    CERT-Vuln-Info.exe
    Sk8erBoi.exe
    IAmWiThYoU.exe
    Phantom.exe
    EntradoDePer.exe
    SiamoDiTe.exe
    BioData.exe
    ALavigne.exe
    {nßhodnΘ}.TXT
    {nßhodnΘ}.DOC