![]() |
![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
|
Welcome to Vista Forums we are your forum for Windows Vista help and discussion. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
br> br> |
| |||||||
|
| | Thread Tools | Display Modes |
| | #1 (permalink) |
| Guest | newbie, in new york city, seeks to become reasonably proficient in the security arena I recently came across this while wading through ms's instruction/explanation notes: ================================================================= Win32/Alcan creates a hidden folder for itself under the "Program Files" folder and copies itself there. It will set a registry key to make itself run on startup out of this folder. This hidden folder will have a name like "winupdates" or "msconfigs". It will share itself out via P2P networks using filenames it gathered from various websites. When run, it attempts to disable a number of system tools by creating files matching their filename but with a ".com" extension instead of a ".exe" extension. When run from the Run window or a command prompt without explicitly specifying the extension, Windows will report the error "The NTVDM CPU has encountered an illegal instruction". The tools affected by this are: cmd, netstat, ping, regedit, taskkill, tasklist, and tracert. Additionally, taskmgr is opened and locked by Win32/Alcan so that it may not be run. Attempts to run it will cause Windows to give the error "Another program is currently using this file". Some versions of Win32/Alcan will install other malicious software, such as Win32/Rbot, onto your computer. ==================================================================== can someone translate this into English? what can I read to assist me in my travails? is there a group in new york city with whom I can vis-a-vis? thanks. -- /s/ Neal Weissman (212) 591-1531 |
My System Specs![]() |
|
| Thread Tools | |
| Display Modes | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Microsoft seeks patent for office 'spy' software | Synapse Syndrome | Vista General | 4 | 01-18-2008 08:56 AM |
| Microsoft seeks patient on immortan computing | Bill Yanaire | Vista General | 2 | 09-07-2007 06:51 AM |
| 2 separate addresses-can i select, depending on arena? | njw | Vista mail | 5 | 05-03-2007 10:11 AM |
| Bill Gates Webcast Jan 29 Times Square New York City | Chad Harris | Vista General | 3 | 01-29-2007 09:52 AM |
| via Arena | Max | Vista hardware & devices | 0 | 09-22-2006 01:50 PM |
| Complimentary Industry Resources Vista Forums has joined forces with TradePub.com to offer you a new, exciting, and entirely free professional resource. Visit http://vistax64.tradepub.com today to browse our selection of complimentary Industry magazines, white papers, webinars, podcasts, and more across 34 industry sectors. No credit cards, coupons, or promo codes required. Try it today! |