Educause Security Discussion mailing list archives

Re: flurry of email attachments


From: ROBERT MYLES <RMYLES () PARKNET PMH ORG>
Date: Tue, 27 Jan 2004 08:28:47 -0600

Hi Risk Virus Alert (W32.Novarg.A@mm (SymantecA) W32/Mydoom@MM [McAfee], WORM_MIMAIL.R [Trend]  This is an ugly virus 
in that it has a spoofed from address, random subject line, random body and random attachment, including .zip 
files.....  also seen these with no subject line at all.

It has three names and to make it easier for everybody I've attached the links to each of these three sites.  Of note, 
both Symantec and Trend has has the latest virus pattern files up, Network Associates should be up shortly.

from Symantec:
http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.novarg.a () mm html 
from Trend:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL.R&VSect=T 
from McAfee:
http://vil.nai.com/vil/content/v_100983.htm 


Robert Myles, CISSP
Information Security Officer
Parkland Health & Hospital Systems
6300 Harry Hines Blvd
Suite 303
Dallas, TX  75235
214-590-0559 (o)
214-590-4433 (f)

kshalla () UIC EDU 01/27/04 08:24AM >>>
Has anyone else gotten a flurry of email attachments (message.zip,
readme.zip, document.exe, document.zip) today?  Today I got about a dozen,
and several returns, of forgeries of me as the sender.


Kevin Shalla
Associate Director of Information and Technical Services
University of Illinois at Chicago
Office of Admissions and Records (MC 018)
1200 W Harrison, Room 2131
Chicago, IL 60607-7161
(312) 996-1231
kshalla () uic edu 

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: