![]() |
|
#1
|
|||
|
|||
|
It relies on social engineering to get people to install for the most part but it may be able to use unpatched vulnerabilities although I am yet to see evidence of this.
Details at http://www.microsoft.com/security/po...n32/Pushbot.BD We have seen this on AOL messenger and MSN Mesenger - and it would be easy to modify it for Yahoo. Beware of apparently meaningless messages from friends out of the blue. Blues
__________________
Still learning, every day |
|
#2
|
||||
|
||||
|
something people should also be aware of in general:
svchost.exe is actually an integral MS Windows file, and will normally be found in the \System32 subdirectory of your Windows OS. On the other hand this filename is regularly used by malware (as in this case), so if you find a copy of it anywhere else on your machine it should raise a red flag. Also several viruses are associated with a file that shows up as scvhost.exe Last edited by charlie23; 29 January 2008 at 12:07 PM. |
|
#3
|
|||
|
|||
|
Or indeed svehost.exe
Good advice from Charlie there ![]() Blues
__________________
Still learning, every day |
![]() |
| Thread Tools | |
| Display Modes | |
|
|