RE: New variant of Virus ?

[falcon () secureconsulting net]

Anybody able to snag the bugger for analysis?  If so, please contact me
offline as we'd like to see it.  Thank you! :)

> There is a variant. See
> http://www.eweek.com/article2/0,4149,1472448,00.asp
>
> Larry Seltzer
> eWEEK.com Security Center Editor
> http://security.eweek.com/
> larryseltzer () ziffdavis com
>
> -----Original Message-----
> From: Hubbard, Dan [mailto:dhubbard () websense com]
> Sent: Tuesday, January 27, 2004 5:13 PM
> To: incidents () securityfocus com
> Subject: New variant of Virus ?
>
>
> It looks like there maybe a new variant of the virus MyDoom worm. We have
> seen the
> following:
>
> RE: I still love you  fLctv
>
> Error 551: We are sorry your UTF-8 encoding is not supported by the
> server, so the text
> was automatically zipped and attached to this message.
>
> The file attached is message.zip and unzips to message.exe
>
> I am analyzing the file for behavior and will update, but has anyone else
> seen this yet
> ?
>
> The latest Nassoc DAT does not cover this.
>
>
>
>
> ---------------------------------------------------------------------------
> ----------------------------------------------------------------------------
>
>
>
>
> ---------------------------------------------------------------------------
> ----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------