VIRUS ALERT
There is a new virus in circulation with the key details as follows:
The essential details are as follows:
· Virus name: W32-Fbound.C-mm
· Official name: Fbound.C-mm
· Number of copies seen so far: 2513+
· Time & Date first Captured: 14/03/2001, 2.55am GMT by MessageLabs
· Origin of first intercepted copy: Japan
· Number of countries seen active: 36
· Top three most active countries: Japan, Hong Kong, Taiwan
Key messages relating to the virus outbreak
· This is the first major outbreak this year.
· Currently the number stopped is rising, but due to it being non-polymorphic and that all the email says is “important” with no body text then the likelihood is that users will realise the threat and not open the attachment. There is nothing enticing the user to open the attachment.
· The attachment is encoded in a single base 64 encoded line, several thousand characters long. This may cause problems for some mail gateway/AV combinations. The worm may also be truncated or corrupted by other mail gateways which cannot cope with lines of this length.
· MessageLabs caught the virus on 14/03/2002 at 2.55am (GMT)
Technical Details:
· Subject title, attachment name and body text:
Subject: Important (or random text if it is a PC with Japanese supported platforms)
Text: (none)
Attachment: patch.exe
Virus Behaviour: Mass Mails only
Payload: none
For further information and up-to-date interception statistics please visit
www.messagelabs.com