I don't know if this is exactly the same but NAI have the following variant.
Cheers Paul Standards are like toothbrushes, everybody agrees you should have one, but no one wants to use yours -------------------------------------- Hello, W32/Fbound.c@mm has been raised to 'Medium On Watch' Detection, and removal, requires the 4091 DAT set and 4070 Engine. The EXTRA.DAT, for detection and removal, is attached. Customers can also utilize the current Daily DAT files: http://www.mcafeeb2b.com/naicommon/avert/avert-research-center/virus-4d.asp The following information can be used to filter related traffic at the gateways: Subject: "Important" or a Japanese subject Body: [empty] Attachment: patch.exe Our VIL description is located at the following URL: http://vil.nai.com/vil/content/v_99386.htm Thank you, Terry Hightower Network Associates, Inc. Enterprise Support Account Manager [EMAIL PROTECTED] 972.855.2112 -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: 14 March 2002 13:21 To: Exchange Discussions Subject: FW: Trend Micro Medium Risk Virus Alert - WORM_FBOUND.B FYI.... -----Original Message----- From: Trend Micro Virus Info [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 13, 2002 11:53 PM To: Martin Blackstone Subject: Trend Micro Medium Risk Virus Alert - WORM_FBOUND.B Trend Micro Medium Risk Virus Alert - WORM_FBOUND.B Dear Trend Micro Customer: WORM_FBOUND.B is currently spreading in-the-wild. This mass-mailing worm sends itself to all email addresses listed in the infected user's Windows Address Book (WAB). It arrives in an email with a subject line randomly chosen from a group of 17 Japanese language phrases, if the email address of the target recipient ends with .jp. The details of the email it arrives with may be as follows: Subject: Important <or random Japanese phrase> Message Body: <blank> Attachment: PATCH.EXE WORM_FBOUND.B is detected by pattern file #241. For more information on WORM_FBOUND.B please visit our Web site at: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_FBOUND.B **************************************************************************** ************** You are receiving this email from Trend Micro, because you have either downloaded a Trend Micro product or have signed up for our "Virus Alerts." If you would like to change the way you receive email from Trend Micro please make changes in your account page at http://www.antivirus.com/subscriptions/default.asp?email=mblackstone@superio raccess.net To UNSUBSCRIBE go to: http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe For questions regarding viruses, please contact the Virus Doctor at [EMAIL PROTECTED] For questions regarding products, please contact Tech Support at [EMAIL PROTECTED] **************************************************************************** *************** _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] *********************************************************************************************** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony United Kingdom Limited. (04) *********************************************************************************************** _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]

