Reply to: John Tolmachoff
Re: [Declude.Virus] Heads up on "Braid" or "Bridex" or "Brid" virus on Tuesday
4:11:22 PM
I put in keywork filters to catch the filename, READ**.EXE, and have
F-Protect and McAfee, but had one go right through all of this this
morning. I don't know if it is using some special encoding but none of
my Declude and Imail filters and scanning stopped this today.
--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com
----- Copy of Original Message(s): -----
J> FYI, Declude Virus caught the first one today. (Caught as the Outlook 'MIME
J> Header' Vulnerability. Scott says F-Prot should have caught it and I am
J> looking into that.)
J> This one does appear to forge the From address. (The one I saw had the From
J> address the same as the To address, although the friendly name was
J> different.)
J> Also interesting to note is it appears to be a resurrection/variant of the
J> Fun Love virus.
J> http://www.sophos.com/virusinfo/analyses/w32braida.html
J> http://securityresponse.symantec.com/avcenter/venc/data/w32.brid.a@;mm.html
J> John Tolmachoff MCSE, CSSA
J> IT Manager, Network Engineer
J> RelianceSoft, Inc.
J> La Habra, CA 90631
J> www.reliancesoft.com
J> ---
J> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
J> ---
J> This E-mail came from the Declude.Virus mailing list. To
J> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
J> type "unsubscribe Declude.Virus". The archives can be found
J> at http://www.mail-archive.com.
J> --
J> ActivatorMail(tm) ver.082302 Scanned for all viruses by
J> www.activatormail.com intelligent anti-virus anti-spam service
--
ActivatorMail(tm) ver.082302 Scanned for all viruses by
www.activatormail.com intelligent anti-virus anti-spam service
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
