Arts and Sciences Computing

A&S IT Security Policy Planning and Implementation

W32/MTX@MM

• Combination Virus, Worm, and Backdoor
• Distributes as Email attachment - diverse possible subject lines
• Hooks wsock32.dll, hooks SMTP traffic.
• Modifies *.exe and *.dll files
• Spreads across network shares

New VBS.dam (Removable)

• No mention of this virus found anywhere yet
• Assume it requires the same safeguards as other VBS worms (e.g., the Love Bug).

W97M.Melissa.BG - ResumeWorm - W97M.Resume.A

• Distributes through Email, subject: Resume - Janet Simons
• Deletes system files
• Attachment size 41,472, called "Resume1.doc," "Explorer.doc" or "Normal.dot"

WScript/KAK.worm

• Infection via email composed in HTML
• Uses Windows ActiveX exploit. Harbinger of nastier worms to come.
• Install patch for NT and Win9x:
  • \\asadmin\sys\admin\updates\nt4\Activex\Q240308.exe
• Make sure Email Viewers don't automatically view HTML files.

I Love You worm

• Infection via email attachment
• McAfee Extra.Dat from May 4, 2000, required with VShield

911 Share/Firkin.worm

• Infection through Shared Directories - No User Action Required
• Clean with McAfee Virus Scan

W32/Pretty.Worm

• Infection via email attachment Pretty Park.exe
• Removal Requires Registry Edit

ExploreZip Trojan Horse/Worm

• Do not open files called "zipped_files.exe" that may come as e-mail attachments.
• This "virus" is extremely destructive. It can delete files on local and network drives. It can spread through email.

Microsoft Word Macro Viruses

• McAfee Hoax List