Dear Matt,
http://vil.nai.com/vil/virusSummary.asp?virus_k=99291
Rob Garrish
Exchange Administrator
Wawa Inc.
610-558-8371
[EMAIL PROTECTED]
-----Original Message-----
From: Matt Hoffman [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 04, 2002 02:33 PM
To: Exchange Discussions
Subject: RE: New Virus ShakerWorld variant?
I can find no listings for this at Nai, nor can I find any listings in a
Google or Overture search. A hoax possibly?
Matt
-----Original Message-----
From: Ben Schorr [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 04, 2002 2:31 PM
To: Exchange Discussions
Subject: RE: New Virus ShakerWorld variant?
What about the "shake.exe" file indicated in the message?
Aloha,
-Ben-
Ben M. Schorr, MVP-Outlook, CNA, MCPx3
Director of Information Services
Damon Key Leong Kupchak Hastert
http://www.hawaiilawyer.com
> -----Original Message-----
> From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 04, 2002 9:19 AM
> To: Exchange Discussions
> Subject: New Virus ShakerWorld variant?
>
>
> I just got a message from OAR.NET referring to a virus alert.
> Still trying to find out more about it, but I thought I
> would post this just in case. Trying to find out more on this
> one to see if there is an attachment I can block.
>
>
> From: Jodi Santini [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 04, 2002 1:07 PM
> To: [EMAIL PROTECTED]
> Subject: Virus Alert - W32/ShakerWorld
>
>
> Posted on notice.oar.net 1/4/02:
>
> Virus Alert:
>
> There is a variation of the W32/ShakerWorld virus making its
> way around the Internet. We are have not found information
> on this virus at Symantec or CERT yet, but this what we have
> learned thus far from our internal security folks which you
> will want to watch out for on your networks:
>
> o Random 8 char. file in the System directory
> o Shake.exe in email (MassMailer)
> o NetBIOS connections spreading virus to servers
> o Registry entry 'sysinfo' under the run statement. Note that we are
> seeing variants in the name of the key sysinfo<random chars>
>
> People who have been hit have gotten this virus thorugh
> email. This virus can install a key in the registry of the
> infected systems.
>
> This is the information we have received at this time.
>
> Thank You,
>
> Jodi
>
>
>
> Pete Pfefferkorn
> Senior Systems Engineer/Mail Administrator
> University of Cincinnati
> 51 Goodman Street
> Cincinnati, OH 45221
> Phone - (513) 556-9076
> Fax - (513) 556-2042
>
>
> _________________________________________________________________
> List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin: [EMAIL PROTECTED]
>
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
