Welcome to TechNet Blogs Sign in | Join | Help

February 2009 - Posts

Announcing the MMPC Portal v2 Beta Release!

Posted Thursday, February 26, 2009 10:00 PM by mmpc
Where you can find it: www.microsoft.com/security/portal/beta How you can give us feedback: Please give us feedback via MS Connect or directly from the MMPC Portal V2 Beta . So now that the important details have been shared, let’s talk about the more Read More...
(Comments Off)

Detection Added For The New 0-day In Excel

Posted Wednesday, February 25, 2009 7:30 AM by mmpc
The MSRC released an advisory about 0-day exploits in Excel and they also have blogged about it. These exploits currently are being used for targeted and limited attacks. We released definition 1.51.1105.0 today to help protect customers against these Read More...
(Comments Off)

Updated Conficker Functionality

Posted Friday, February 20, 2009 10:00 PM by mmpc
We’ve been getting questions from some of our customers about a new sample of Win32/Conficker , dubbed by some as Conficker.B++. We’re aware of this sample and our definitions already detect this sample as Worm:Win32/Conficker.B , but given the new functionality Read More...
(Comments Off)

MSRT Observations – Online Game Password Stealers

Posted Thursday, February 19, 2009 5:00 PM by mmpc
The February release of MSRT added a new threat family, Win32/Srizbi , as Vince discussed last week. As of February 16, MSRT has cleaned 38,697 machines from Srizbi infections, which is 14.1% of the total September 2007 removals of Win32/Nuwar or the Read More...
(Comments Off)

We Read Their Forums Too

Posted Tuesday, February 17, 2009 11:07 PM by mmpc
I received an e-mail to my personal account, from a student who wanted to ask me about how to detect a paticularly complex virus. This happens occasionally, so no surprises there. The virus in question was one on whose detection I had worked several years Read More...
(Comments Off)

Little Red Riding Hood or Big Bad Wolf? Your Sweetheart or Waledac?

Posted Friday, February 13, 2009 3:00 PM by mmpc
Valentine's Day is almost here. While your friends and loved ones are crafting their e-cards, malware authors are also releasing their annual love letters into the mix. Win32/Waledac started a bit early, we noticed it’s Valentine theme spam mails as early Read More...
(Comments Off)

There's a New Virut on the Block

Posted Wednesday, February 11, 2009 10:32 AM by mmpc
After quite a while with no new activity, there's a new Virut variant. We detect the new variant as Virus:Win32/Virut.BM . Like the previous versions, Virut is a polymorphic file infecting virus that infects PE executable files like EXE and SCR files. Read More...
(Comments Off)

MSRT February 2009 - Win32/Srizbi

Posted Tuesday, February 10, 2009 10:50 AM by mmpc
This month's MSRT takes on one of the largest botnets currently active worldwide – Win32/Srizbi . The Srizbi family of malware consists of trojan droppers and rootkits that often spread through spam e-mails containing download links to the malware. Much Read More...
(Comments Off)
 
Page view tracker