elamb » w32

What is W32 Myzor?

elamb.security — Tue, 04 Dec 2007 07:10:40 +0000

W32 Myzor is a part of a family of “Scamware”. These are trojans that pose as anti-virus/anti-spyware appliations that actually install malware on to your computer (viruses, worms, mass emailers). They attempt to gather your personal information and scare you into purchasing some shitty malicious software (no offense to adds running on this site).

W32.Myzor.FK@yf virus. The warning are fake. Your system probably is infected but it is infected because a myzor variant put it there. The balloon about “You computer is infected”, is not real.

go to the following for more:

w32 myzor
w32 myzor fk
w32 myzor fk yf

w32 flash almod

elamb.security — Sun, 02 Dec 2007 03:39:52 +0000

“w32 flash almod” If you are looking for W32/Alemod here are some links to remove this potential virus:

- PCGeeks – W32/Alemod

- CommentComarche – Hijackthis files

Tags: w32, alemod, virus

w32 serflike a

elamb.security — Sun, 02 Dec 2007 03:33:40 +0000

I have never heard of any virus called "w32 serflike a", however if you believe you have this or any other malware a good place to start investigating this is to use Autoruns

Autoruns is the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. Autoruns goes way beyond the MSConfig utility bundled with Windows Me and XP.

virus w32 2fsober.k 40mm

elamb.security — Sun, 02 Dec 2007 03:25:44 +0000

You typed in w32/sober.@mm

You are looking for information on the W32.Sober@mm. W32 indicates that this malware affects Windows 32 systems. Sober is the family of malware it belongs to and â€œmmâ€ stands for mass-mailing. The W32.Sober@mm virus is actually a mass-mailing worm. It uses a SMTP engine to spread itself. The subject of the email is in English or German. The name of the email attachment varies, and it will have a .bat, .com, .exe, .pif, or .scr file extension. It is written in the Visual Basic programming language and is compressed with UPX. W32.Sober@mm may display the fake error message “File not complete!”

Riparare File Dnsrslve Da W32 Spybot Worm

elamb.security — Sun, 02 Dec 2007 01:24:04 +0000

more on: Riparare File Dnsrslve Da W32 Spybot Worm

Dnsrslve.exe [DNS Resolver] is a virus added by the W32/Rbot-WS worm also know as Backdoor.Win32.Rbot.gen, W32/Sdbot.worm.gen.g, WORM_SDBOT.APN.

ref: http://sophos.com

Tags: riparare-file-dnsrslve-da-w32-spybot-worm, worm, malware, w32