12345

1/05/2011

Be careful on malicious e-mail disguised as sent by Microsoft.

1. Introduction

Spreading malicious e-mail disguised as sent by Microsoft has been reported on Jan 04, 2011.
This e-mail has its title as "Update your Windows" and contains malicious file.
Besides, this mail is disguised as sent by Microsoft and induces user to download its attachment.


[Fake Microsoft security update spreads Autorun worm]
http://nakedsecurity.sophos.com/2011/01/04/fake-microsoft-update-spreads-worm/

2. Spreading path and symptoms of infection

Detail is as following.


Furthermore, this mail is disguised as Windows Update related contents and induces user to download attachment for updating. The rumor has that "Steve Lipner is a name of Microsoft's employee."


Upon downloading attachment, victim can see ZIP file and get exe file as same as ZIP file's name.
Its name is same as normal Windows update file.

Upon executed exe file, its clone will be generated on certain path and it will change registry value.

- Generated files

(Driver root)\SecurityUSB.2.8.exe (217,600 bytes)
(Driver root)\boot.inf (43 bytes)

- Modify registry value
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
Value name : "Hidden"
Value data : 0

3. How to prevent

To use PC safely from security threats of these malicious attachments, we recommend following "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
5. Execute downloaded file after scan with anti-virus SW.

INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function with “nProtect Anti-Virus/Spyware” for detecting such as malicious file stated above and runs responding system against various security threats.

23 comments:

  1. Yes! One of my friend had fell into one such trap when one fraudster sent her an email regarding a malicious file on her laptop and requires X amount of money to fix it she paid and never got any response, ever. https://getappvalley.com/ https://tutuappx.com/ https://tweakbox.mobi/

    ReplyDelete
    Replies
    1. Need The To Hire A Hacker❓ Then contact PYTHONAX✅

      The really amazing deal about contacting PYTHONAX is that the Hack done by us can’t get traced to you, as every Hacking job we do is strongly protected by our Firewall. It’s like saying if anyone tries to trace the Hack, it will lead them to us and we block whatever actions they are doing.

      We have been Invisible to Authorities for almost a decade now and if you google PYTHONAX, not really about us comes out, you can only see comments made by us or about us.

      Another Amazing thing to you benefit from Hiring our Hackers is that you get a Legit and the best Hacking service, As we provide you with Professional Hackers who have their Hacking Areas of specialization.
      We perform every Hack there is, using special Hacking tools we get from the dark web.

      Some list of Hacking Services we provide are-:
      ▪️Phone Hacking & Cloning ✅
      ▪️Computer Hacking ✅
      ▪️Emails & Social Media Account Hacking✅
      ▪️Recovering Deleted Files✅
      ▪️Tracking & Finding People ✅
      ▪️Hunting Down Scammers✅
      ▪️Hack detecting ✅
      ▪️Stealing/Copying Files & Documents From Restricted Networks and Servers ✅
      ▪️Bitcoin Multiplication✅
      ▪️Binary Option Money Recovery ✅
      ▪️Forex Trading Money Recovery✅
      ▪️IQ Option Money Recovery✅
      And lots more......


      Whatever Hacking service you require, just give us an Email to the Emails Address provided below.
      pythonaxhacks@gmail.com
      pythonaxservices@gmail.com

      PYTHONAX.
      2020 © All Right Reserved.

      Delete
    2. The news you share is very attractive. I love reading your posts, I will regularly read your blog.

      دانلود آهنگ جدید

      Delete
  2. Found Interesting and wonderfull keep sharing
    website

    ReplyDelete
  3. I Think this is great post. Everyone should work for helping others. Thanks Admin

    ReplyDelete
  4. Need help with finding a difference between thesis vs dissertation? Follow my link for a guide!

    ReplyDelete
  5. You should continue posting these useful articles. These letters are so helpful! I love it.

    ReplyDelete
  6. Academicwriting is hard. There is no doubt about it. Almost every single student around the globe faces difficulties with these assignments. Top essay writing service is a great way to facilitate your student's life and get good grades.

    ReplyDelete
  7. Hello everyone, I am in high school and now the moment came when we needed to write an essay, but since I had no experience in this, I had difficulties. And then I came to the rescue, the guys from "college discussion boards" came. I just wrote them "write my essay" and got a quick and very high-quality work. I am very pleased with the result and want to recommend them to you!

    ReplyDelete
  8. Terdapat bermacam-macam jenis taruhan yang bisa anda pasang di sbobet88 seperti 1x2, Over Under, Correct Score, Half Time dan Full Time, First Goal dan masih banyak yang lainnya.

    Situs taruhan paling lengkap dan paling populer di Asia termasuk Indonesia adalah sbobet88 dan juga telah memiliki ribuan agen resmi sehingga anda dengan mudah buat akun bola, deposit dan juga tarik dana kemenangan.

    sbobet88 telah terkenal di seluruh dunia sebagai penyelenggara aneka permainan taruhan Judi Online memiliki banyak keunggulan. Tak hanya taruhan Bola, terdapat taruhan olahraga lainnya seperti : Tennis, Bola Basket, Badminton, Tinju, Motor GP/ F1, Hockey, dan masih banyak lagi.

    Salah satu jenis taruhan sbobet88 yaitu Odd Even jenis taruhan yang melibatkan jumlah total goal dari pertandingan kedua team apakah jumlah goalnya Genap atau Ganjil.

    Untuk bisa login situs sbobet88 anda harus memiliki akun resmi yang dibuat melalui agen yang memiliki track record sebagai agen bola terpercaya dan biasanya memiliki ribuan member.

    ReplyDelete
  9. Provide the Assignment Help online support service. Expert writers of US assignment who will help you by providing good high-quality essay help and other assignment assistance services. I Need Help With My Homework

    ReplyDelete
  10. That's because 3G is out and 4G mobile internet is in-and what an advantage it is to be a user of fourth generation wireless standards. Imagine all the perks of wireless connectivity that you're familiar with without any of the drawbacks of wireless connectivity that you are definitely familiar with. Unlimited wireless internet provider

    ReplyDelete
  11. Students find History Research Paper Services as being of great assistance since they are able to complete their history research paper writing services and history essay writing services on time.

    ReplyDelete
  12. Paramedic coursework writing services are very difficult to complete and many students are always searching for Paramedic Science Writing Services to help them complete their paramedic assignment writing services and paramedic research paper writing services.

    ReplyDelete
  13. Thanks for sharing. I hope it will be helpful for too many people that are searching for this topic.
    click on here

    ReplyDelete
  14. This comment has been removed by the author.

    ReplyDelete