[unisog] New email virus

Greg.Harrison greg.harrison at analog.com
Fri Oct 31 22:32:52 GMT 2003


Its the Mimail virrus. Here's the info we have:


	Network Associates and AVERT Labs have raised their risk assessment for
a new virus called W32/Mimail.c at MM.  This one has the ability of propagation via
e-mail.  The required DAT files for detection are 4.0.4301 and the necessary
engine is 4.1.60. The DAT files are not available at this time.

*	Blocking "PHOTOS.ZIP" and "PHOTOS.JPG.EXE" at Mimesweeper (Complete)
*	Forcing DAT update via ePO for all clients in ePO (Waiting for DAT
release)
*
	For more information, please see:
http://vil.nai.com/vil/content/v_100795.htm

	

--> Mailing-List: contact unisog-help at sans.org; run by ezmlm
--> X-No-Archive: yes
--> List-ID: unisog
--> List-Post: <mailto:unisog at sans.org>
--> List-Help: <mailto:unisog-help at sans.org>
--> List-Unsubscribe: <mailto:unisog-unsubscribe at sans.org>
--> List-Subscribe: <mailto:unisog-subscribe at sans.org>
--> List-Digest-Subscribe: <mailto:unisog-digest-subscribe at sans.org>
--> List-Digest-Unsubscribe: <mailto:unisog-digest-unsubscribe at sans.org>
--> Delivered-To: mailing list unisog at sans.org
--> Delivered-To: moderator for unisog at sans.org
--> Date: Fri, 31 Oct 2003 10:24:16 -0500
--> Mime-Version: 1.0 (Apple Message framework v552)
--> From: David Bruce <david.bruce at simmons.edu>
--> To: unisog at sans.org
--> Content-Transfer-Encoding: 7bit
--> Subject: [unisog] New email virus
--> X-Spam-Status: No, hits=-0.9 required=5.0 
tests=KNOWN_MAILING_LIST,USER_AGENT_APPLEMAIL version=2.55
--> X-Spam-Level: 
--> X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
--> 
--> 
--> Since this morning, we are seeing a new e-mail virus that does not 
--> appear to be detectible by current Norton or McAfee virus definitions.  
--> So far, the attachment received has always been named "photos.zip" with 
--> subject "our private photos".  We are now filtering email on this 
--> basis.  Has anyone else seen this?
--> 
--> 
--> --
--> David Bruce                                          Phone: 617.521.2187
--> UNIX Systems Administrator                           Fax:   617.521.3082
--> Simmons College, Office of Information Technology
--> 300 The Fenway, Boston, MA 02115-5898            david.bruce at simmons.edu

/---------------------------------------------------------------------------\
* Greg Harrison                   | "Do not meddle in the affairs of        *
* System Administrator            |  wizards, for you are crunchy and taste *
* Analog Devices                  |  good with ketchup          "           *
* 7910 Triad Center Drive         |                   -Anonymous            *
* Greensboro, NC 27409            |  For reply, send a self-abused          *
* (336) 605-4359                  |     stomped antelope to                 *
* email: greg.harrison at analog.com |  greg.harrison at analog.com               *
\---------------------------------------------------------------------------/



More information about the unisog mailing list