I don't know if this is exactly the same but NAI have the following variant.

Cheers

Paul

Standards are like toothbrushes,
everybody agrees you should have one,
but no one wants to use yours


--------------------------------------
Hello,

W32/Fbound.c@mm has been raised to 'Medium On Watch'
Detection, and removal, requires the 4091 DAT set and 4070 Engine.
The EXTRA.DAT, for detection and removal, is attached.  Customers can
also utilize the current Daily DAT files:
http://www.mcafeeb2b.com/naicommon/avert/avert-research-center/virus-4d.asp

 

The following information can be used to filter related traffic at the
gateways:

Subject: "Important" or a Japanese subject
Body: [empty]
Attachment: patch.exe

Our VIL description is located at the following URL:
http://vil.nai.com/vil/content/v_99386.htm

Thank you,
Terry Hightower
Network Associates, Inc.
Enterprise Support Account Manager
[EMAIL PROTECTED]
972.855.2112


-----Original Message-----
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: 14 March 2002 13:21
To: Exchange Discussions
Subject: FW: Trend Micro Medium Risk Virus Alert - WORM_FBOUND.B


FYI....

-----Original Message-----
From: Trend Micro Virus Info [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, March 13, 2002 11:53 PM
To: Martin Blackstone
Subject: Trend Micro Medium Risk Virus Alert - WORM_FBOUND.B


Trend Micro Medium Risk Virus Alert -  WORM_FBOUND.B

Dear Trend Micro Customer:

WORM_FBOUND.B is currently spreading in-the-wild. This mass-mailing worm
sends itself to all email addresses listed in the infected user's Windows
Address Book (WAB). It arrives in an email with a subject line randomly
chosen from a group of 17 Japanese language phrases, if the email address of
the target recipient ends with .jp. 

The details of the email it arrives with may be as follows: 

Subject: Important <or random Japanese phrase>
Message Body: <blank>
Attachment: PATCH.EXE 

WORM_FBOUND.B is detected by pattern file #241.
 
For more information on WORM_FBOUND.B please visit our Web site at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_FBOUND.B

****************************************************************************
**************
You are receiving this email from Trend Micro, because you have either
downloaded a Trend Micro product or have signed up for our "Virus Alerts."
If you would like to change the way you receive email from Trend Micro
please make changes in your account page at
http://www.antivirus.com/subscriptions/default.asp?email=mblackstone@superio
raccess.net
 
To UNSUBSCRIBE go to:
http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe
 
For questions regarding viruses, please contact the Virus Doctor at
[EMAIL PROTECTED]
 
For questions regarding products, please contact Tech Support at
[EMAIL PROTECTED]
****************************************************************************
***************


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]


***********************************************************************************************
The information contained in this message or any of its attachments may be 
confidential and is intended for the exclusive use of the addressee(s). Any 
disclosure, reproduction, distribution or other dissemination or use of this 
communication is strictly prohibited without the express permission of the sender. The 
views expressed in this email are those of the individual and not necessarily those of 
Sony or Sony affiliated companies. Sony email is for business use only. 

This email and any response may be monitored by Sony United Kingdom Limited.
(04)
***********************************************************************************************


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to