Edit: Subject Changed - See below for further details /Edit
Some has opened something they shouldn't..
Mass mailer - With a variety of subjects, including...
Re: Text Message
See attached. (NOTE LIVE VIRUS)
Anyone heard of this...
Steve
Printable View
Edit: Subject Changed - See below for further details /Edit
Some has opened something they shouldn't..
Mass mailer - With a variety of subjects, including...
Re: Text Message
See attached. (NOTE LIVE VIRUS)
Anyone heard of this...
Steve
Talk to TheHorse13. Yesterday in IRC he mentioned Details.cpl being received. A use of strings command on Linux resulted in the attached file.
It's This : http://us.mcafee.com/virusInfo/defau...virus_k=124875
W32/Bagle.aa@MM
Sigh - Time to use the Beta Dat files & see how it does....
Steve
Hmm
AVG and eTrust EZ armor didn't spot it, and I updated them both today.
From some of the strings it appears to come from 29a, but I havent had a chance to find their website to see if they mention it.
Cheers
You might wanna search for a file called cplstub.exe in your %windir%. That's the file it drops.
Looks very similar to my strings list...Quote:
Originally posted here by MsMittens
Talk to TheHorse13. Yesterday in IRC he mentioned Details.cpl being received. A use of strings command on Linux resulted in the attached file.
It is confrimed as W32/Bagle.aa@MM!
McAfee beta DAT picks it up, but not their current one (4353)
DAT file 4354, to be released late today or tommorrow will detect it.
So far We've seen no adverse effects with using the beta DAT if anyone else wants to take the risk.
More user education required.
Yup, I know, and it opens a port & contacts a number of sites....Quote:
You might wanna search for a file called cplstub.exe in your %windir%. That's the file it drops.
<sigh> That'll be my nice spam free email address out in the wild - I just bet you!
Steve
After looking over a large sample of e-mails, my little group of e-mails turned out to be a tweaked version of this:
http://www.symantec.com/avcenter/[email protected]
The updated AntiVir files, (downloaded 5 minutes ago), detects it immediately.
Yeah & they've raised it to medium risk, looks like my phone call to them may have been worthwhile.Quote:
Originally posted here by Tiger Shark
The updated AntiVir files, (downloaded 5 minutes ago), detects it immediately.
Steve