http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7042497 en Sat, 26 Mar 2022 03:43:36 EDT Sat, 26 Mar 2022 03:43:36 EDT http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7051032
We dont get much mail and we do get routed threw www.nac.net will they provide enough protection for us?]]> http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7051032 Fri, 06 Jun 2003 19:30:05 EDT http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7050941 --
"Things will get better,despite our efforts to improve them!"--Will Rogers]]> http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7050941 Fri, 06 Jun 2003 19:20:26 EDT http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7047514 http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7047514 Fri, 06 Jun 2003 12:22:38 EDT http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7046308 --
Train Yourself To Relax...Ride The New Haven Railroad]]> http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7046308 Fri, 06 Jun 2003 09:37:59 EDT http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7045888 said by TrainBuff:

---

I never heard of the "fake message bounce" virus. To show my ignorance, what is that one.

---

It's one of the nastier methods of delivery IMO. The virus sends out an email that appears to the untrained eye to be a "message undeliverable" or bounce. The attached "log" is actually a virus, usually an html application (hta file).

I first saw it early this year. The first version was an obvious fake bounce due to mispellings and awful grammar, but the latest version is a bit more convincing.
--
Sometimes it's easier to beg for forgiveness than ask for permission]]> http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7045888 Fri, 06 Jun 2003 08:03:38 EDT http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7045698 --
Train Yourself To Relax...Ride The New Haven Railroad]]> http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7045698 Fri, 06 Jun 2003 07:20:38 EDT http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7043162
The "fake message bounce" virus is on the move again too, I've seen it twice this week.
--
Sometimes it's easier to beg for forgiveness than ask for permission]]> http://www.dslreports.com/forum/Re-Watch-out-for-this-Virus-its-spreading-rapidly-7043162 Thu, 05 Jun 2003 22:09:34 EDT http://www.dslreports.com/forum/Watch-out-for-this-Virus-its-spreading-rapidly-7042497 From MessageLabs

New Bugbear Virus Spreading Rapidly; Poses Significant Damage Threat
5 June 2003

New York, NY, June 5, 2003 – MessageLabs, the world’s leading provider of managed email security services, today announced it has intercepted a very high volume of a new mass mailing virus, W32/Bugbear.B-mm, and has issued a high-level alert for enterprises.

MessageLabs first intercepted copies of the virus at 6:59 am on June 4 and as of 11:00 am EDT today has intercepted more than 35,000 copies of the virus across 106 countries while providing complete protection for MessageLabs customers (latest statistics available on the MessageLabs Web site).

W32/Bugbear.B-mm differs greatly from recent virus outbreaks. It appears to be very polymorphic and malicious in nature. It has the ability to repack or modify itself during each generation, presumably in an attempt to foil simple anti-virus signature fingerprinting techniques to detect it. The virus re-mails itself to the recipient’s address book using a random email, which could potentially be highly confidential, found in the recipient’s address book.

In copies of the virus that MessageLabs has stopped, the MS01-020 auto-open exploit has also been found, which will automatically execute the virus attachment just by reading the email on an un-patched Windows system.

Initial analysis indicates that this virus also attempts to disarm local security software, such as anti-virus or firewall software. It may also be able to spread via network shares, as was the case with the earlier Bugbear.A strain. Furthermore, it installs a key-logging trojan component and enables an unscrupulous hacker to take control of the infected machine and download a file containing the user’s keystrokes, including information entered on websites such as passwords or credit-card details for example.

“Bugbear.B is likely to be more damaging than any virus seen so far this year,” said Mark Sunner, Chief Technology Officer at MessageLabs. “Particularly worrying is the fact that not only can Bugbear leach confidential information from an infected machine, but it may also leave a backdoor wide open for hackers to take control of the machine and misappropriate passwords, credit-card details or for some other nefarious purpose.”

To find more detailed information on the virus and to track its activity across the globe, please visit: »www.messagelabs.com/viru ··· threats/
--
Lance]]> http://www.dslreports.com/forum/Watch-out-for-this-Virus-its-spreading-rapidly-7042497 Thu, 05 Jun 2003 21:10:44 EDT