Re: [Full-Disclosure] New Virus under way ...

"Helmut Hauser" <helmut_hauser@hotmail.com> wrote:

> got a strange Mail 2day:
>
> Subject: RE: Protected message
> From: 20030814171411.10246.qmail@www.securityfoc
>
> link to virus is ...
> http://<IP>:81/100721.php
<<snip>>

It will have been one of the new Bagle variants discovered in the last
few hours -- Bagle.Q (though some vendors had already named this with
an earlier variant ascription), Bagle.R and Bagle.S all fit the
description, and possibly the just discovered (within the last hour or
so) Bagle.T... (The vendors should be in agreement as to the names of
the last three.)

Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Thu Mar 18 07:45:33 2004