Yep, it's very new. Here's one vendor's write-up, indicating it was spreading well by 5PM Pacific time on Wednesday night:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MYD OOM.BB Andrew 8) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Brumm Sent: Wednesday, February 16, 2005 5:38 PM To: [email protected] Subject: RE: [Declude.Virus] New MyDoom virus I just got one with the latest F-Prot update that shows as w32/[EMAIL PROTECTED] . Gary At 04:46 PM 2/16/2005, you wrote: >Are you sure that your F-Prot is up to date? > >I saw this same thing yesterday, and submitted a sample via their web >submission report. They responded this morning, but in the meantime I >had checked again later that afternoon yesterday and I was seeing >detections as W32/Mydoom.gen (and McAfee saw the detection as >W32/[EMAIL PROTECTED]). > >Andrew 8) > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Don Hickey >Sent: Wednesday, February 16, 2005 4:00 PM >To: [email protected] >Subject: [Declude.Virus] New MyDoom virus > > >We are many of these since about 5pm central time. Mcafee has >definition updates to catch this. We were catching it by the blocked >extensions before the Mcafee update was installed. > >http://vil.nai.com/vil/content/v_131856.htm > >At this time F-prot is not catching these.. > >Don > > > >-- >No virus found in this outgoing message. >Checked by AVG Anti-Virus. >Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: 2/14/2005 > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To unsubscribe, >just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". The archives can be found >at http://www.mail-archive.com. >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To unsubscribe, >just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". The archives can be found >at http://www.mail-archive.com. ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax: (209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
