Are u sure? Trend says 690 is the latest and a search at Trend's site shows no hits for "yaha."
Paul Chinnery Network Administrator Mem Med Ctr -----Original Message----- From: Sander Van Butzelaar [mailto:[EMAIL PROTECTED] Sent: Friday, November 28, 2003 12:34 AM To: Exchange Discussions Subject: RE: New Virus received in Details.zip Morning All The nasty fella is called: Worm_YAHA.AF and you need Trends pattern file 691 to pick it up. Enjoy your weekend. <clearing the coffee cups and empty pizza boxes> Sander -----Original Message----- From: Sander Van Butzelaar Sent: 27 November 2003 01:18 PM To: Exchange Discussions Subject: New Virus received in Details.zip Hi All Just a heads up about a new virus (or possibly a variation of an existing one) we received. The virus executed when a user unzipped the the details.zip file. Furthermore there was a text file with what looks like a random letter generated name. We scan zip files, but nothing was picked up. The virus disables Trend AV on the client, plus it disables Regedit, Task Manager and a couple more like those utils. The pc pretty much comes to a standstill after that. We are running the latest Trend AV on our Exchange server plus the latest Office Scan on the desktops. Our pc's are pretty much up-to-date with Microsoft patches too. Trend just advised us that they are developing a new patch for this virus/variation of a virus. Plse be on the lookout for updates from your AV suppliers. Regards Sander _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
