-Caveat Lector- ------- Start of forwarded message ------- From: [EMAIL PROTECTED] To: "VirusEye Subscriber" <[EMAIL PROTECTED]> Subject: Fwd: New Virus Alert: W32/Ganda.A Date: 3/17/2003 6:46:24 AM
The details of the new virus are as follows (as at 1500 GMT, 17th March 2003): Virus name: W32/Ganda.A-mm Aliases: WORM.SwedenSux Number of copies seen so far: 3 Date first Captured: 16th Mar 2003, 10:19 GMT Origin of first intercepted copy: Sweden Number of countries seen active: 1 Most active countries: Sweden Technical Details On 16th March 2003, MessageLabs stopped the first copy of a new virus. Initial analysis suggests that this is a mass-mailing virus that is capable of propagating using email. Ganda.A uses its own SMTP email engine and appears to gather email addresses from the recipients’ Microsoft Outlook address book. It attempts to drops itself to c:\windows\scandisc.exe, and c:\windows \????????.exe (where ?? are seemingly random characters). It also contains a number of static email addresses that it uses when attempting to send malicious content. Initial analysis would also suggest that the sender’s from: address is not spoofed. For further information, please visit: http://www.messagelabs.com/viruseye/report.asp?id=135 VirusEye Monthly View is a monthly report based on the data and information supplied from the live data feeds of our global operations network. This means that we can provide the very latest and most comprehensive email security news available. MessageLabs is able to compile these figures thanks to its Internet level position, allowing it to detect viruses in its customers email before they reach the company network boundary. For further information, please visit: http://www.messagelabs.com/page.asp?id=756 This email was sent to you because you subscribe to MessageLabs' Virus Alert service. You can cancel your subscription on the MessageLabs website at http://www.messagelabs.com/AlertUnsubscribe MessageLabs is a leading provider of Internet-level managed email security services. Through its SkyScan portfolio of services, MessageLabs customers are protected from email-borne threats such as viruses, unsolicited mail and pornographic material, before such content comes anywhere near their network boundaries. ______________________________________________________________________ __ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.messagelabs.com ______________________________________________________________________ __ -------- End of forwarded message -------- Forwarded for your information. The text and intent of the article have to stand on their own merits. ~~~~~~~~~~~~~~~~~~~~ In accordance with Title 17 U.S.C. section 107, this material is distributed without charge or profit to those who have expressed a prior interest in receiving this type of information for non-profit research and educational purposes only. ~~~~~~~~~~~~~~~~~~~~ "Do not believe in anything simply because you have heard it. Do not believe simply because it has been handed down for many genera- tions. Do not believe in anything simply because it is spoken and rumoured by many. Do not believe in anything simply because it is written in Holy Scriptures. Do not believe in anything merely on the authority of teachers, elders or wise men. Believe only after careful observation and analysis, when you find that it agrees with reason and is conducive to the good and benefit of one and all. Then accept it and live up to it." The Buddha on Belief, from the Kalama Sutra <A HREF="http://www.ctrl.org/">www.ctrl.org</A> DECLARATION & DISCLAIMER ========== CTRL is a discussion & informational exchange list. Proselytizing propagandic screeds are unwelcomed. Substance—not soap-boxing—please! These are sordid matters and 'conspiracy theory'—with its many half-truths, mis- directions and outright frauds—is used politically by different groups with major and minor effects spread throughout the spectrum of time and thought. That being said, CTRLgives no endorsement to the validity of posts, and always suggests to readers; be wary of what you read. CTRL gives no credence to Holocaust denial and nazi's need not apply. Let us please be civil and as always, Caveat Lector. ======================================================================== Archives Available at: http://peach.ease.lsoft.com/archives/ctrl.html <A HREF="http://peach.ease.lsoft.com/archives/ctrl.html">Archives of [EMAIL PROTECTED]</A> http://archive.jab.org/[EMAIL PROTECTED]/ <A HREF="http://archive.jab.org/[EMAIL PROTECTED]/">ctrl</A> ======================================================================== To subscribe to Conspiracy Theory Research List[CTRL] send email: SUBSCRIBE CTRL [to:] [EMAIL PROTECTED] To UNsubscribe to Conspiracy Theory Research List[CTRL] send email: SIGNOFF CTRL [to:] [EMAIL PROTECTED] Om