This was covered in yesterday's dat release for NAI\Mcafee (Groupshield). -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Posted At: Tuesday, October 01, 2002 8:10 AM Posted To: List - Exchange Server List Conversation: Notification: WORM_OPASOFT Subject: RE: Notification: WORM_OPASOFT
Trend is giving this a medium risk. More than yesterdays one. -----Original Message----- From: Brian Ko [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 01, 2002 5:00 AM To: Exchange Discussions Subject: Notification: WORM_OPASOFT Got this from Trend early this morning. Brian Dear Everyone, This is to inform you that we have received many inquiries about WORM_OPASOFT.A from Japan and Taiwan Short Description: This network worm propagates via network shared C:\ drives. It also has backdoor capabilities, downloading executable applications, possibly malicious, from a specific site. It may then execute the downloaded programs. At this time of analysis, the download site is blocked or is currently down. This worm also scans for the computer name and domain name of machines connected to the network and then sends this information to the download site. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_OPA SOFT.A Protection: Pattern: OPR 357 http://www.trendmicro.com/download/pattern.asp Please send us infection report from your area. If you have any concerns, you can send an email to [EMAIL PROTECTED], CC: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
