bestfriends.scr AIM virus

[Mark Wilson <wilsodm () AUBURN EDU>]

Be on the lookout for this one as we are seeing a lot of this.  There is
a snort rule for it.

If you notice traffic going to 81.91.66.220, you probably have infected
hosts.

There are several strains going around as we have had to update McAfee
3 times.

More info can be found at http://www.jayloden.com/BestFriends.htm

Mark Wilson
GCIA, CISSP #53153
Network Security Specialist
Auburn University
(334) 844-9347

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Attachment: Mark Wilson.vcf
Description: