I don't think it's the same beast
I will try to contact CA tomorrow to get some information on this virus.
The only think I put my hand on point to a trojan using the ftp port (21).
It was send to me from the incidents mailing list from securityfocus.org
---
Here's the info and a resource list as well,
http://www.liquidmatrix.org/trojan.htm
http://www.simovits.com/trojans/tr_data/y237.html
-----Message d'origine-----
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Date: 4 septembre, 2001 16:53
À: Exchange Discussions
Objet: RE: Virus Backdoor/ccinvader
We just started seeing it. McAfee catches it as "New Backdoor" more
information can be found at
http://vil.nai.com/vil/virusSummary.asp?virus_k=99198
Ken Powell
Systems Administrator
Clark County Office of Budget and Information Services (OBIS)
Vancouver, Washington
[EMAIL PROTECTED]
Voice: (360) 397-6121 x4658
Fax: (360) 759-6001
-----Original Message-----
From: Bourque Daniel [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 04, 2001 10:11 AM
To: Exchange 5.5 List
Subject: Virus Backdoor/ccinvader
OK, please don't laugh... Inoculan is not running on Exchange, just the
workstations...
Inoculan have been reporting multiple files infected by the
BACKDOOR/CCINVADER virus since the last update this week-end (Sig 27.47).
Anybody have seen this virus before? A search on Sybari, Trend Micro,
Norton and McAfee return nothing and CA don't have any description for the
virus. A search on Google return sites with the virus but I have not find
description.
Anybody with a tech description of the virus or is it a false alarm???
Daniel Bourque
Analyste - Centre d'Assistance Technique
Loto-Québec
[EMAIL PROTECTED]
(514) 499-5056
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
