From: Kenneth Oncinian (no email)
Date: Mon Mar 01 2004 - 02:59:00 EST
You are right, TrendMicro detects it as Bagle.F
Gennaro Esposito wrote:
> Greetings
> Please pay attention to the mail with subject: "beautiful" sent by
> on this mailing list. It contains an attachement
> "Barbie.zip" which contains a file called "Stacy.scr". It seems to be
> a VIRUS (but it is not identified by the scanners).
> I've not analyzed completely the code (I'm sending a copy of it to
> F-Secure for a better job) but it seems to contain a smtp engine to
> connect (in my understanding) to some smtp servers in UK to, maybe,
> perform a DDoS...
> Please, do not open the attachement and, to the mailing list manger,
> delete the mail from the archive.
> Thank you.
>
> ----------
> Gennaro Esposito
> (System & Security Engineer)
> MARS Center *****************************
> Via E. Gianturco,31 * YES! I SUPPORT *
> I-80146 - Napoli - ITALY * *
> ph.: +39 081-6042 493 * _/_/ _ _/_/ *
> fax...: +39 081-6042 100 * _/_/===x===_/_/ *
> mailto: * _/_/ _/_/ *
> http://www.marscenter.it * *
> ftp://ftp.marscenter.it *International Space Station*
> *****************************
|
|
|