You have seen email worms spreading around half
the world in just a matter of a day or two. What if a worm employs other modes
of proliferation too, in addition to the email way?!
Security Analysts from
MicroWorld Technologies inform that ‘Worm.Win32.Feebs.db’
is a new entrant to the Feebs family that spreads via email, P2P Networks and
Web /FTP Servers.
Feebs.db circulates via email attachments in “.HTA”
format containing HTML application files. This file includes a JavaScript component
that facilitates further download of malware from predefined Servers. The same
JavaScript strain will also cause a fake web page to be displayed to misinform
you that the Internet connection is not available.
“Feebs represents
that breed of worms which explore multiple ways of proliferation. In here, the
worm makes sure that it’s got plan B and plan C in place, if the first method
fails. Apparently, this strategy is proving successful as one can see Feebs spreading
fast in targeted groups,” explains Arti Taru, Assistant Manager, R&D,
MicroWorld Technologies.
After installing
itself in the registry, the worm disables many AntiVirus and Firewalls and lowers
Windows Security levels, in order to exposes computers to further attacks. Then
it places itself in shared folders used by some P2P applications and sends invitations
to other Workstations to accept the new resource.
“The larger picture
is that malware writers are intensifying their levels of attack and diversifying
their modes of proliferation to inflict maximum damage. For the well established
international Cyber Mafia, their best chances of getting the biggest returns lie
in achieving a global reach within a short span of time. In this game, if you
choose to chase them, you are bound to lose!” points out Govind Rammurthy,
CEO, MicroWorld Technologies.
MicroWorld
Solutions stay ahead of online threats by perpetually updating cures for new Viruses
and by empowering their advanced Virus engine with a sophisticated and continuously
evolving Heuristic method. It’s like developing a strong, futuristic immunity
against all kinds of malware, concludes Govind.
MicroWorld
MicroWorld
(www.mwti.net) is the developer of the world's
first Real-Time AntiVirus and Content Security software eScan
for desktops and servers. Its communication security software, MailScan
is the first comprehensive e-mail scanner for your SMTP/POP3 Mail Server. MicroWorld
Winsock Layer (MWL) is the revolutionary technology underlying these products,
powering them to several certifications and awards by some of the most prestigious
testing bodies, notable among them being Virus Bulletin, Checkmark, TUCOWS, Red
Hat Ready, and Novell Ready. Combining their powerful scanner with MWL technology,
MicroWorld solutions provide a Real-Time Proactive security for your systems.
For network security of enterprises, eConceal Firewall is the latest powerful
offering from MicroWorld.
To learn more, kindly visit http://www.mwti.net.
