[Mimedefang] New worm : from james at xxxxx with photos.zip attachment

John Mason Jr. John.Mason.Jr at Autostradeint.com
Sat Nov 1 14:02:31 EST 2003



> -----Original Message-----
> From: mimedefang-bounces at lists.roaringpenguin.com 
> [mailto:mimedefang-bounces at lists.roaringpenguin.com] On 
> Behalf Of Stephane Lentz
> Sent: Friday, October 31, 2003 4:41 AM
> To: amavis-user at lists.sourceforge.net; 
> mimedefang at lists.roaringpenguin.com; jchkmail at listes.ensmp.fr
> Subject: [Mimedefang] New worm : from james at xxxxx with 
> photos.zip attachment
> 
> 
> Anybody noticed a new worm today ? 
> Messages get sent with james at xxxx (xxxx being a domain
> chosen dynamically I guess based on the recipient address) 
> which photos.zip as attachment ? photos.zip contains an 
> attachment photos.jpg.exe. It does not seem detected by virus 
> vendors yet. Watch your logs for messages sent by some james@ ....
> 





 
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100795
#removal_instructions

http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.c@mm.
html



John




More information about the MIMEDefang mailing list