EmailEmail
PrintPrint
Worry Watch -- The bird flu Trojan takes flight
Saturday, November 05, 2005

As top researchers collect information on a possible pandemic outbreak of the avian influenza, a new Trojan is exploiting the public's curiosity.

 
 

WEEKLY REPORTS

More information

Top 10 Threats

   
 

The new threat, Naiva.a, hides within an e-mail claiming to have information about the virus, also known as the bird flu. The e-mail tricks you into opening the message and its malicious Microsoft Word attachment with the subject headings, "Outbreaks in North America," or "What is avian influenza (bird flu)?"

Once opened, the Word document downloads various macros -- single words or symbols containing several commands -- enabling the Trojan to manage files. The macros also allow a second Trojan, Ranky.fy, to download, allowing your computer to be remotely controlled by a hacker.

Microsoft Word users have the ability to protect themselves against Naiva.a and other macro-based attacks by ensuring that the Macro security under the program's "Tools" menu is set to at least "Medium." If any macros are detected in an open Word document, a warning will be triggered.


Worry Watch Plus Online only:

More Information About the Bird Flu and the Naiva.a Trojan
Panda Software Definition

Centers for Disease Control and Prevention: Avian Influenza/Bird Flu


Latest Security Updates:

Anti-Spyware Product

Latest update

Download Site

Ad-Aware SE

SE1R72 26.10.2005 (Definitions updated October 26, 2005)

Download

Spybot Search and Destroy

Version 1.4 (Definitions updated October 28, 2005)

Download

Spy Sweeper

Version 4.5.5.604 (Released October 27, 2005)

Download

Go back

* Reading: Solutions, Prevention & Remedies
Additional summary information related to a specific type of solution or prevention that you should be considering. Depending upon the week, this section may have:
• Recent Windows security releases from Microsoft
• Recent updates to widely used anti-spyware programs
• Recent updates to widely used anti-virus programs
• Recent updates to other security programs & devices (ex: Firewalls, routers)
• Recent updates to various applications in wide use


Top 10 Threats:

Name

Type

Affects

Alert Level

Mitglieder.FM

Trojan

Windows 95, 98, 2000, ME, NT, XP*

High

Mitglieder.FK

Trojan

Windows 95, 98, 2000, ME, NT, XP*

Medium

Sdbot.ftp

Worm

Windows 95, 98, 2000, ME, NT, XP

Medium

Mitglieder.FL

Trojan

Windows 2000, XP*

High

Netsky.P

Worm

Windows 95, 98, 2000, ME, NT, XP*

Severe

Mitglieder.FN

Trojan

Windows 95, 98, 2000, ME, NT, XP*

High

Gaobot.gen 

Worm

Windows 2000, NT, XP*

Medium

Qhost.gen

Trojan

Windows 2000, NT, XP*

Low

Downloader.FRV

Trojan

Windows 95, 98, 2000, ME, NT, XP*

Low

FU.A

Trojan

Windows 2000, XP, NT*

Medium

Go back

Read: Top Threats
These are viruses that are currently on the watch lists of major anti-virus software companies.

Name
What the threat is called. We use the name given each virus by Panda Software. Sometimes other anti-virus companies give the same threat a different name. Usually they use similar names.

Type
There are different characteristics associated with different types of threats.
• Virus - has the ability to replicate or infect computers or other programs
• Trojan Horse (or Trojan) - appear to be harmless programs when you get them. They unleash their payload when you double-click, open, or execute them.
• Phishing - a Web site or e-maill message posing as another company - usually one you know to fool you into giving the sender personal information.
• Worm - self replicates onto additional disks, computers or networks
• Spyware - installs on your system to collect information about your activity, preferences or interests
• Hoax - false messages sent by e-maill to mislead the recipient
• Backdoors - opens a security hole that allows outsiders to take control of your computer
• Dialer - uses your telephone to dial an outside number - sometimes a number that costs you money when dialed

Affects
Not all viruses affect all types of systems. Some, for example may affect only Windows 98 and 95, but not Windows XP or NT. Others affect all Windows systems, but not Macintosh. In this column, we show you the consumer systems that the threat is known to affect. We don't always include the servers that operate in your company's backroom.

Alert level
The level of awareness that anti-virus vendors suggest you need to have for each threat listed.
For each threat listed, we'll post a corresponding link here, so you can get more information to help you recognize, diagnose, prevent, and repair the problem.

First published on November 5, 2005 at 12:00 am
Worry Watch is compiled by David Radin & Jes Scherder using data and reports from Microsoft, CERT, Panda, and other sources. To contact the compilers of Worry Watch, go to http://www.megabyteminute.com/contactdavid.html.