[Dshield] New Outlook virus?

Frank Buttitta frank at cstech.com.au
Tue Oct 1 03:22:22 GMT 2002


Getting Hits Today From Lots Of Our Monitored Firewalls

Frank

----- Original Message -----
From: "Kenton Smith" <ksmith at chartwelltechnology.com>
To: <list at dshield.org>
Sent: Tuesday, October 01, 2002 9:15 AM
Subject: RE: [Dshield] New Outlook virus?


> *This message was transferred with a trial version of CommuniGate(tm) Pro*
> I got a notice from McAfee today about the W32/Bugbear at MM virus. It sounds
> similar to KLEZ. I haven't looked into it much because it takes advantage
of
> an exploit in IE5.01 and 5.5 and we aren't running either one here. Here's
> the link though - http://www.mcafee.com/anti-virus/viruses/bugbear/ Hope
> that helps.
>
> Kenton Smith
>
> -----Original Message-----
> From: list-admin at dshield.org [mailto:list-admin at dshield.org]On Behalf Of
> Mike Morrell
> Sent: Monday, September 30, 2002 1:14 PM
> To: list at dshield.org
> Subject: [Dshield] New Outlook virus?
>
>   Has anyone seen a potentially new Outlook virus in the wild?
>
>    It appears that you receive an infected message that shows no
> attachment when viewed in Outlook.  When opened the virus sends email
> out to people in your address book with a subject and content taken
> from a previously sent message.  One person reported seeing something
> flash on their screen very quickly when it was opened.  The virus is
> attaching itself using the name of an attachment you sent before.
>    Up to date Mcafee and Norton virus scanners do not appear to be
> catching it.  My Anomy Sanitizer at home caught that there was an .scr
> attachment with the message and defanged it.  Other people reported
> that their virus scanner did not catch it but an email defanger did.
>
>
> Mike
>
>
>





More information about the list mailing list