McAfee's 4381 DATs are out now too (they call it Mydoom.o). Bitdefender's been catching it here for a few hours.
Cheers, Phil ---- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Martin Blackstone > Sent: 26 July 2004 17:58 > To: Exchange Discussions > Subject: RE: A new e-mail virus? > > Trend calls it Mydoom.m, and has a pattern available for it now. 945. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Blunt, James H (Jim) > Sent: Monday, July 26, 2004 8:31 AM > To: Exchange Discussions > Subject: RE: A new e-mail virus? > > [EMAIL PROTECTED] > http://securityresponse.symantec.com/avcenter/venc/data/w32.my > [EMAIL PROTECTED] > > -----Original Message----- > From: Eric Fretz [mailto:[EMAIL PROTECTED] > Sent: Monday, July 26, 2004 8:18 AM > To: Exchange Discussions > Subject: RE: A new e-mail virus? > > It's not a virus because nothing is attached and there are no > obvious links or other active content in the e-mail message. > Therefore, nothing triggers Norton AV. Also, the internet > headers are stripped out, probably because the message has > been made to look like it came from inside the organization. > If viruses can masquerade as internal messages, what's > stopping legitimate criminals? > > Eric Fretz > > L-3 Communications > ComCept Division > 2800 Discovery Blvd. > Rockwall, TX 75032 > tel: 972.772.7501 > fax: 972.772.7510 > > > > -----Original Message----- > From: Sabo, Eric [mailto:[EMAIL PROTECTED] > Sent: Monday, July 26, 2004 10:03 AM > To: Exchange Discussions > Subject: RE: A new e-mail virus? > > > Is your AV detecting this virus? If so what are you using? > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Jim Sullivan > Sent: Monday, July 26, 2004 10:59 AM > To: Exchange Discussions > Subject: RE: A new e-mail virus? > > Yhea... My Help Desk just received 5-6 calls about this in > the past 30 minutes. > > > -----Original Message----- > From: Neil Doody [mailto:[EMAIL PROTECTED] > Sent: Monday, July 26, 2004 10:59 AM > To: Exchange Discussions > Subject: RE: A new e-mail virus? > > > HAHA, just got off the phone to one of our users with this > exact message. > Must be doing the circulation right now. > > > -----Original Message----- > > From: Eric Fretz [mailto:[EMAIL PROTECTED] > > Sent: 26 July 2004 15:43 > > To: Exchange Discussions > > Subject: A new e-mail virus? > > > > This morning I received a undeliverable message report with > the title, > > > "RETURNED MAIL: SEE TRANSCRIPT FOR DETAILS". This is not > unusual, so > I > > opened the message and looked at the transcript. It looks like the > > message was sent from the System Administrator to a > non-existant user > > in my domain. > > I clicked on the "Resend" button so I could see the original message > that > > was sent and the following text was in the message: > > > > ------------------------------------------------------- > > Dear user [EMAIL PROTECTED], > > > > Your account was used to send a huge amount of junk e-mail > during this > > > week. Most likely your computer was infected by a recent > virus and now > > > runs > a > > hidden proxy server. > > > > We recommend that you follow instructions in order to keep your > computer > > safe. > > > > Have a nice day, > > comceptinc.com technical support team. > > ------------------------------------------------------- > > > > I have never seen a System Administrator generated message > like this. > Has > > anyone else seen something like this? > > > > Thanks! > > > > > > Eric Fretz > > > > L-3 Communications > > ComCept Division > > 2800 Discovery Blvd. > > Rockwall, TX 75032 > > tel: 972.772.7501 > > fax: 972.772.7510 > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: http://intm-dl.sparklist.com/cgi- > > bin/lyris.pl?enter=exchange&text_mode=&lang=english > > To unsubscribe send a blank email to [EMAIL PROTECTED] > > dl.sparklist.com > > Exchange List admin: [EMAIL PROTECTED] > > To unsubscribe via postal mail, please contact us at: Jupitermedia > > Corp. > > Attn: Discussion List Management > > 475 Park Avenue South > > New York, NY 10016 > > > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=& > lang > =english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=& > lang=english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang > =english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang > =english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang > =english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang=english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
