[Dshield] New Version of I-Worm Bagle.HV

Betsy Horn bhorn at hfblaw.com
Wed Nov 2 01:43:35 GMT 2005


Thanks to you guys, I was able to add these file names to our anti-spam system and caught two of these buggers this afternoon.  

Thanks for the heads-up!

Betsy

>>> kruse at krusesecurity.dk 11/01/05 3:55 PM >>>
Hi,

Btw, there are three different variants as of yet. 

Cheers
Peter

> -----Original Message-----
> From: list-bounces at lists.dshield.org 
> [mailto:list-bounces at lists.dshield.org] On Behalf Of Fergie
> Sent: 1. november 2005 20:54
> To: joem at nist.gov
> Cc: list at lists.dshield.org
> Subject: Re: [Dshield] New Version of I-Worm Bagle.HV
> 
> Among others, yes.
> 
> - ferg
> 
> -- Joe Matusiewicz <joem at nist.gov> wrote:
> 
> At 02:23 PM 11/1/2005, Chris Wright wrote:
> >-----BEGIN PGP SIGNED MESSAGE-----
> >Hash: SHA1
> >
> >Hi peoples...
> >
> >Just a FYI.
> >Received a new version of the I-Worm/Bagle.HV tonight.
> 
> Does the file have one of the following names cause we're 
> also just stated seeing something new?
> 
> sms_text.zip
> Info_prices.zip
> Business_dealing.zip
> new_prices.zip
> text_sms.zip
> max.zip
> Health_and_knowledge.zip
> Business.zip
> 
> 
> -- Joe
> 
> --
> "Fergie", a.k.a. Paul Ferguson
>  Engineering Architecture for the Internet  
> fergdawg at netzero.net or fergdawg at sbcglobal.net  ferg's tech 
> blog: http://fergdawg.blogspot.com/
> 
> 
> _________________________________________
> Using .Net? Need to know more about .Net Security?
> http://isc.sans.org/banner_count.php?dest=dotnet
> 
> _______________________________________________
> send all posts to list at lists.dshield.org To change your 
> subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 


_________________________________________
Using .Net? Need to know more about .Net Security?
http://isc.sans.org/banner_count.php?dest=dotnet

_______________________________________________
send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list


-----------------------------------------------
Scanned by Gwavix for all known viruses.




More information about the list mailing list