Techno-News Blog Ray Schroeder, editor, OTEL - University of Illinois at Springfield

Link to Web Counter at www.digits.com

Bobby Approved (v 3.2)
Tuesday, December 17, 2002
F-Secure Reports New Worm - Lioten ALIAS: Iraq_oil, Datrix, W32.Lioten, W32/Lioten, I-Worm.Lioten

THIS VIRUS IS RANKED AS LEVEL 2 ALERT UNDER F-SECURE RADAR. Lioten, also known as Iraq_Oil, is a Windows network worm spreading through shared folders. It was found on December 16th, 2002 in the wild. Lioten does not spread through e-mail at all. Instead, it scans the internet for Windows 2000 and Windows XP machines which have shared folders with other users and are not protected by a firewall. Once a suitable machine is found, the worm guesses a password, logs in to the machine, copies itself over as an EXE file (usually named iraq_oil.exe) and executes it. After this the worm restarts spreading.

 


Comments: Post a Comment

Fair Use