Wez Posted November 8, 2002 Share Posted November 8, 2002 Sorry it's a bit late but I have just been updating one of our servers and I read up on this one and it an spread through the Kazaa Peer - Peer system. Update your anti virus I'd say, I'm not sure what it does mind! Link to comment Share on other sites More sharing options...
Wez Posted November 8, 2002 Author Share Posted November 8, 2002 UPDATE - BE CAREFUL!! The W32/Oror family of worms create two data files in the Windows folder which contain information used by the worms while they are running. These data files have innocent-looking names, incorporating the first few letters of the computer name forwards and backwards. These files have normal-looking extensions, including .DEF, .VXD and .SYS. Example of the names of these data files on a computer named VICTIM might be: dosvictim32.vxd niwmitciv98.sys If these files are removed whilst the worms are active, the worms immediately begin deleting all files on the computer. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now