|
0 members (),
521
guests, and
28
robots. |
Key:
Admin,
Global Mod,
Mod
|
S |
M |
T |
W |
T |
F |
S |
|
|
|
1
|
2
|
3
|
4
|
5
|
6
|
7
|
8
|
9
|
10
|
11
|
12
|
13
|
14
|
15
|
16
|
17
|
18
|
19
|
20
|
21
|
22
|
23
|
24
|
25
|
26
|
27
|
28
|
29
|
30
|
31
|
|
There are no members with birthdays on this day. |
#27917
Fri 04 May 2001 05:59:AM
|
Joined: Feb 2001
Posts: 3,536
Mission Commander
|
OP
Mission Commander
Joined: Feb 2001
Posts: 3,536 |
VBS/Helper.Worm<P>Helper is a new virus that also has worm<BR>capabilities, found in the wild in China.<BR>It spreads through the OutLook Express mail<BR>client and also infects files with extensions<BR>.HTM and .HTT on the system.<P>Once activated, the worm creates copies of<BR>itself as HELP.VBS, HELP.HTA, HELP.HTM, and<BR>UNTITLED.HTM under the Windows directory.<BR>It then registers UNTITLED.HTM as Stationary<BR>for Outlook Express by adding the following<BR>registry keys:<P>HKEY_CURRENT_USER\Identities\<default user id>\Software\Microsoft\Outlook<BR> Express\5.0\Mail\, "Message Send HTML"<BR>HKEY_CURRENT_USER\Identities\<default user id>\Software\Microsoft\Outlook<BR> Express\5.0\Mail\, "Compose Use Stationery"<BR>HKEY_CURRENT_USER\Identities\<default user id>\Software\Microsoft\Outlook<BR> Express\5.0\Mail\, "Stationery Name"<P>Any new mail composed after infection will<BR>have the virus embedded as Visual Basic<BR>Script in the message body.<P>HELP.HTM will be registered as wall paper<BR>by adding the following key:<P>HKEY_CURRENT_USER\Control Panel\desktop\wallPaper<P>It will run help.htm if the active desktop<BR>is enabled.<P>As a virus, it appends itself to host<BR>files, increasing their size by 9,900 bytes.
|
|
CMS The Best Conveyancing solicitors conveyancing quotes throughout the UK
For any webhosting enquiries please email webmaster@aus-city.com
|
Forums60
Topics684,790
Posts719,401
Members2,957
|
Most Online3,142 Jan 16th, 2023
|
|
|
|
Copyright 1996 - 2023 by David Cottle. Designed by David Bate Jr. All Rights Reserved.
By using this forum, the user agrees not to transfer any data or technical information received under the agreement, to any other entity without the express approval of the AUS-CITY Forum Admins and/or authors of individual posts (Forum Admins and DoD/USSPACECOM for the analysis of satellite tracking data).
Two-line elements (TLE) and all other satellite data presented and distributed via this forum and e-mail lists of AUS-CITY are distributed with permission from DoD/USSTRATCOM.
Reprise Hosting
|
|