Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

New e-mail virus

by tomron Jan 11, 2006 8:46AM PST

check this link out

http://isc.sans.org/diary.php?n&storyid=1035

Discussion is locked

1 Posts

- Collapse + Expand Details

- Collapse -

Tom, Thanks !

by Marianna Schmudlach Jan 11, 2006 9:30AM PST

Attachment name "message.zip", detection by AV is still thin to nonexistent. When run, the code tries to pull additional files from web servers in Russia, so if you have a chance, you might consider blocking the following TLDs on your proxy / perimeter:

1gb.ru / t35.com / hzs.nm.ru / users.cjb.net / h16.ru

Yikes !

Back to Spyware, Viruses, & Security forum