Michael Greenberg wrote:
Hey, one of my users just had this same thing. It bypassed our AV as well.
I'm looking into things further. Seems like it popped up overnight.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Rabe Sent: Tuesday, July 27, 2004 12:45 PM To: Imail User Forum Subject: [IMail Forum] New Virus??
Hey There,
Starting last night I received a few e-mail that came form [EMAIL PROTECTED] and [EMAIL PROTECTED] with zip file attachments. Within those attachments are .scr and .htm.exe files. Our SAVSMTP server has the latest Symantec Definitions on them and it detected nothing. I then scanned the attachments with McAfee's latest definitions, nothing. I then did an online scan with Trend Micro - nothing. Are these new or are these just so mangled that they aren't being detected? I have since sent them to Symantec for review, but it seems a bit odd that I would get so many and the three different AV companies would not be able to detect them. These are not password protected zip files. For the time being I just stopped accepting .zip attachments.
Any ideas?
A new variant of Mydoom has surfaced over the past day or so. I saw the same things happening yesterday.
http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
Proland reports it as mydoom.o
http://www.protectorplus.com/virus_info/worms/mydoomo.htm
I am wondering if there isn't yet another variant just starting to make the rounds as well that isn't included in the defs yet.
Regards,
John
http://www.ispservices.com
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
