Staple balls
|
| posted on 18/2/04 at 05:41 PM |
|
|
tasty new virus
Not wanting to panic anyone, but keep yours eyes out and use your brains 
A WORM NAMED BAGLE-B could rank third in the world worm rankings behind its illustrious counterparts Sobig.F and Mydoom.A, The US and the UK have
been hit hardest by the malevolent worm, the company warned. Germany comes a shaky third.
Sophos said the worm, also known as Tanx-A, spreads via email and arrives with the subject line 'ID' followed by various random characters
and the message text, 'Yours ID'. The attached .exe file has a randomly generated filename and can allow mysterious hackers to gain remote
access to infected computers when run. The worm forwards itself through mailbox addresses and spoofs the "From:" field using addresses
found on the infected hard drive. Snorre Fagerland, with Norwegian Internet security company Norman, told AFP, the worm is "very serious".
On the scale of the most dangerous viruses, it gets a third place," he said.
full story
free and cheerful virus scaner
|
|
|
|
|
flak monkey
|
| posted on 18/2/04 at 06:18 PM |
|
|
I got a similar warning from McAfee Dispatch this morning, I'm up to date. But note that it will not spread on certain mail servers, which is
good news for some of us 
W32/Bagle.b@MM is a Medium Risk mass-mailing worm with a potentially dangerous remote access component that may open a backdoor on an infected
computer to hackers. Similar to last month's outbreak, W32/Bagle.b@MM arrives as an executable attachment inside an email. When run, the virus
emails itself to addresses it steals from the infected computer, spoofing the "from: field" with one of the harvested addresses.
If the date is Feb. 25, 2004 or later, the worm simply exits and does not attempt to spread.
Caution: An infected email can come from addresses you recognize.
What to look for:
From: address may be forged
Subject ID (random string)... thanks
Attachment: Varies but contains a .exe extension
Body: Yours ID (random string) -- Thank
Aliases: W32.Aula@mm, W32/Tanx.A-mm
NOTE: The virus does not mass-mail itself to addresses that contain:
@hotmail.com
@msn.com
@microsoft
@avp
Up-to-date McAfee VirusScan users with dat 4324 are protected from this threat.
Sera
http://www.motosera.com
|
|
|
|
