NAC: Virus alert
David
duandcc_forums at cox.net
Tue Aug 19 15:26:31 EDT 2003
Just as an FYI, my company has been getting hammered with a new virus, well not new but a new version of an old virus. Nobody has been infected but it's knocking at our firewall doors hard... Here's some info on it:
Email Routine Details
The email message has the following characteristics:
From: Spoofed address (which means that the sender in the "From" field is most likely not the real sender).
The worm may use the address admin at internet.com as the sender.
Subject:
* Re: Details
* Re: Approved
* Re: Re: My details
* Re: Thank you!
* Re: That movie
* Re: Wicked screensaver
* Re: Your application
* Thank you!
* Your details
Body:
* See the attached file for details
* Please see the attached file for details.
Attachment:
* your_document.pif
* document_all.pif
* thank_you.pif
* your_details.pif
* details.pif
* document_9446.pif
* application.pif
* wicked_scr.scr
* movie0045.pif
NOTE: The worm deactivates on September 10, 2003. The last day on which the worm will spread is September 9, 2003.
See http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html for full details.
Dave
1987.5 CGT 2.3
SE Virginia
More information about the quattro
mailing list