Security Incidents mailing list archives

RE: Anyome else seeing a rise in Mydoom Viruses over email?


From: "Thompson, Jimi" <JimiT () mail cox smu edu>
Date: Wed, 28 Jan 2004 15:51:32 -0600

We were told by McAfee that they released a DAT at about 1pm today (CST)
that is supposed to deal with MyDOOM better, so you might want to update
your definitions.

HTH,

Jimi

-----Original Message-----
From: Nigel Frankcom [mailto:nigel () blue-canoe net] 
Sent: Monday, January 26, 2004 6:04 PM
To: incidents () securityfocus com
Subject: Anyome else seeing a rise in Mydoom Viruses over email?

Hi All,

Over the last 2 hours our mail servers have seen a dramatic rise in
Mydoom virus emails.

So far neither Panda nor McAfee are detecting it - tho the following
Content Filter is working for us:

*C_o_n_tent-Transfer-Encoding: 7bit* (remove _'s)

Subject seems to morph as each new wave is released.

Most connections *seem* to be from private machines.

Numbers are rising.

Regards

Nigel



---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: