name address book
Information on Klez Worm Sending Viruses With F-Secure Name
White Paper This worm spreads by sending e-mail messages to addresses found from users address book - like most other e-mail worms. Instead of showing the owner of the infected machine as the sender, Klez replaces it with a random address from the address book. [28 Apr 2004]
New Virus-Worm I.Worm.Maldal a/k/a Christmas Targets Those in the Holiday Spirit (Kaspersky)
White Paper The worm spreads via e-mail, and in order to start-up, the worm gains access to the Outlook address book. It's important to note that the attached worm file always has the name CHRISTMAS.EXE. This is done unbeknownst to users, after which the worm... [22 Apr 2004]
Phatbot is "the Swiss army knife of Trojans"
News There are hundreds of different commands ranging from various types of DDoS attacks to stealing everything from the address book to deleting files and finding new hosts to infect. We have seen lots of different versions of this Agobot, but someone... [18 Mar 2004]
An In-depth Look at W32.Winux and W2K.Stream and the Ever Growing "Proof of Concept" Virus
White Paper These viruses aren't spread automatically by spamming your address book. Both of these viruses were created or co-authored by a programmer that goes simply by the name "Benny". Two of the most innovative viruses have come out of the group 29A. [24 Feb 2004]
The Metaphors of the Net
White Paper These meta-tags (arranged in semantic and relational ontologies" - lists of metatags, their meanings and how they relate to each other) will be read by various applications and allow them to process the associated strings of symbols correctly... [24 Feb 2004]
Password-stealing Dumaru worm on the loose
News If run, this program will harvest email addresses from the user's local address book and forward copies of itself to them. The name of the unzipped file includes a large number of spaces to hide the final .exe and to make it look, at a glance, like... [27 Jan 2004]
Sobig virus devastation continues
News Sobig.F, like previous variants of the virus, forges the source address of every email it sends, using addresses culled from the Windows address book or found in cached web pages. The ISP said it saw a dramatic increase in the number of mail-record... [22 Aug 2003]
Sobig the worst worm ever
News The Sobig.F virus spreads by harvesting emails from web pages and from the address book of an infected computer. Sobig.F, like previous versions of the virus, uses an email address other than the victim's as the apparent source of email messages... [21 Aug 2003]
Microsoft pulls web address to foil worm
News On Thursday, Microsoft changed the internet addresses that correspond to the Windowsupdate.com entry in the domain name service (DNS) servers that act as the internet's address book. As part of its effort to stop the progress of the MSBlast worm... [18 Aug 2003]
W32.Maldal.D@mm (Symantec)
White Paper The worm utilizes Outlook to spread itself to everybody in the Outlook address book. Payload: Large scale e-mailing: Utilizes Outbook to mail everyone in the Outlook Address Book Name: W32.Maldal.D@mm [14 Aug 2003]
W32/Klez-D (Sophos)
White Paper The worm sends itself to entries in the Windows address book and arrives in an email with a subject line selected from: The attachment has a random filename and the sender address is either a random uppercase name at yahoo.com, hotmail.com or sina... [14 Aug 2003]
W32/Klez-C (Sophos)
White Paper The worm sends itself to entries in the Windows address book and arrives in an email with a subject line selected from: The attachment has a random filename and the sender address is either a random uppercase name at yahoo.com, hotmail.com or sina... [14 Aug 2003]
W32/Maldal-F (Sophos)
White Paper W32/Maldal-F is a worm which uses Microsoft Outlook to send itself to everyone in the Outlook address book. Name: W32/Maldal-F Date: January 16, 2002 Click through to view the alert text for disinfection information. [14 Aug 2003]
W32/Goner@MM (Mcafee)
White Paper This is a mass mailing worm that attempts to send itself to all entries in the Outlook Address book. Name: W32/Goner@MM Date: December 4, 2001 This is a HIGH RISK virus that spread via Microsoft Outlook and can be spread via ICQ. [14 Aug 2003]
W32/Klez-G // W32/ElKern-B (Sophos)
White Paper This worm searches for email address entries in the Windows address book but uses its own mailing routine. Name: W32/Klez-G Date: February 7, 2002 Type: Win32 worm W32/Klez-G is a Win32 worm that carries a compressed copy of the W32/ElKern-B virus... [14 Aug 2003]
