Posted on 03/07/2002 4:34:56 PM PST by ex-Texan
Win32.Gibe trojan, worm
Win32/Gibe is a buggy mass-mailing worm that utilizes Microsoft Outlook and the SMTP to propagate.
The email pretends to be an official message from Microsoft Corp. carrying the latest version of a security update for Internet Explorer and MS Outlook/Express.
The attachment name is: q216309.exe
If the attachment is executed, the worm will drop 4 files into the Windows directory and execute them:
WinNetW.exe, BcTool.exe - mass-mailing components
GfxAcc.exe - Backdoor Trojan listening on port 12378
q216309.exe - copy of itself
A DLL is also dropped into the System Directory:
vtnmsccd.dll - copy of itself
The worm creates the file 02_N803.dat in the Windows directory to store any email addresses collected from the local system.
The following registry modifications are also made:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\LoadDBackUp =
"C:\WINDOWS\BcTool.exe"
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\3Dfx Acc =
"C:\WINDOWS\GFXAcc.exe"
This will cause the backdoor trojan and the mass-mailing component to execute upon Windows startup.
Then the worm will wipe out your hard drive and its files !!
Ask yourself these questions:
Where is the first place I go to on the internet to find out what's happening with politics?
Am I getting any benefit from Free Republic?
Am I learning from Free Republic?
Free Republic is not free. It costs Jim Robinson tens of thousands of dollars to keep this forum running. There are almost 80,000 registered users on Free Republic and approximately 1,000 Freepers help keep this forum running. Those who do not have the ability to donate money could help by bumping the threads once in a while. I've been in a position where the funds were low and every penny was needed to pay for frivolous things such as food. Those who do have the means should be ashamed of yourselves. You are a FReeploader. Go ahead, flame me. I don't care. I contribute to Free Republic, and I for one do not want to see this forum dead.
If everyone who registered donated one measly dollar a month, we would never have to have a fundraiser again. Thus ending the silly graphics and posts. But, it's not happening, so we will continue this annoying process until we reach our goal.
Because The Constitution Still Matters - Freepathon Thread 3
I don`t use Outlook, too many holes.
Please, freepers, sign up for just a little each month. Just sign up for $3 a month--will you really miss that? It's easy, automatically billed to a credit card, and you get the satisfaction of being more than just a reader. You become a contributor to freedom, you really do.
If you have ever asked yourself, "what can I possibly do that truly helps change the world?", well, this is all you have to do. Sign up for $3 a month, and you have helped change the world. Every minute, every day.
If you think that just $3 a month won't make a difference, or that it is embarassing, because you wish you could afford more, YOU ARE WRONG!!! A dime a day, that's all it takes, and you will be so greatefully thanked!
Become a single, solid, brick in the fortress of freedom we build here together, as friends and freedom fighting buddies in the trench together. That's all it takes, really!
If we were together fighting on the battle field, I know that you would pick up a shovel and help me dig a foxhole, I know you would! We are grunts in the trenches, and we are what makes the whole thing work.
Join me; become a brick for freedom! PLEASE sign up for just a couple of bucks a month. Please? Nobody here is making a profit, or living large. They operate from day to day, with no thought of profit. This site depends on us troopers on the field, please sign up? Do it now--you want to! You will feel GREAT!
Did I say please?
Flame away!!!
I've used Linux for many years and the first non-mainframe programming I ever did was on an Apple. I like them both, but they're operating systems, for goodness sakes, not infallible dieties!
Windows Sucks! Linux Sucks! Macs are Great!!
Macs Suck! Windows Sucks! Linux is Great!!
I think that covers it all...well, except for this
CP/M RULES!
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.