Security Incidents mailing list archives
Re: New variant of Virus ?
From: Gary Flynn <flynngn () jmu edu>
Date: Wed, 28 Jan 2004 12:06:10 -0500
Hubbard, Dan wrote:
It looks like there maybe a new variant of the virus MyDoom worm. We have seen the following:RE: I still love you fLctvError 551: We are sorry your UTF-8 encoding is not supported by the server, so the text was automatically zipped and attached to this message. The file attached is message.zip and unzips to message.exe I am analyzing the file for behavior and will update, but has anyone else seen this yet ?
We've seen several of these here since yesterday. I submitted it last night and was told third-hand that the following Sophos definition was created for it: http://www.sophos.com/virusinfo/analyses/trojstawina.html -- Gary Flynn Security Engineer - Technical Services James Madison University --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- New variant of Virus ? Hubbard, Dan (Jan 28)
- Re: New variant of Virus ? Gary Flynn (Jan 28)
- Re: New variant of Virus ? Nick FitzGerald (Jan 29)
- Message not available
- Re: New variant of Virus ? Mike Tancsa (Jan 28)
- Re: New variant of Virus ? Luke Gill (Jan 28)
- Re: New variant of Virus ? Mike Tancsa (Jan 28)
- Re: New variant of Virus ? Gary Flynn (Jan 28)
- RE: New variant of Virus ? Larry Seltzer (Jan 28)
- RE: New variant of Virus ? falcon (Jan 28)