Re: CRIME W32.Aliz.Worm

From: John E Jewkes-AAA0OR (aar0mi@private)
Date: Mon Nov 26 2001 - 17:26:54 PST

  • Next message: Kuo, Jimmy: "RE: CRIME W32.Aliz.Worm"

    Hi Scott and the Group,
            This is exactly why I ALWAYS use something other than
    that 'outlook' or 'outlook express' for handling email. They seem
    very reluctant to fix even the smallest errors and vulnerabilities,
    let alone the big, drive your truck sized worm or virus through it,
    kind.... 
    John Jewkes AAA0OR OR/W6HNC
    US Army MARS Oregon
    
    On Mon, 26 Nov 2001 15:33:20 -0800 Scott Elam <Scott.Elam@private>
    writes:
    > The above worm has also just been upgraded to a 4 (out of 5) by 
    > Symantec
    > (sorry Jimmy).  Have your employees update their virus definitions 
    > if
    > they don't normally do it daily.  Aliz is a very simple worm but 
    > uses
    > the Outlook MIME bug that allows your PC to be automatically 
    > exploited.
    > 
    >    http://www.sarc.com/
    > 
    > Scott
    > --
    > Scott.Elam@private
    > Sun Microsystems / Network Security Group / Computer Emergency 
    > Response
    > Team
    > 
    > 
    > -------- Original Message --------
    > Subject: CRIME W32.Badtrans.B@mm
    > Date: Mon, 26 Nov 2001 11:36:49 -0800
    > From: "T. Sugahara" <sugahara@private>
    > To: <crime@private>
    > 
    > If you haven't already heard:  W32.Badtrans.B@mm is a MAPI worm 
    > that
    > emails
    > itself out as one of several different file names. This worm also 
    > drops
    > a
    > backdoor trojan that logs keystrokes. It's current distribution is
    > extremely
    > high.  I have received over 50 e-mails with the worm.  Please 
    > secure
    > your
    > networks against .pif's and .scr's if you haven't already.  
    > Apologies if
    > this is a repeat.
    > 
    > T. Kenji Sugahara
    > Chief Operations Officer
    > Counterclaim
    > 
    ________________________________________________________________
    GET INTERNET ACCESS FROM JUNO!
    Juno offers FREE or PREMIUM Internet access for less!
    Join Juno today!  For your FREE software, visit:
    http://dl.www.juno.com/get/web/.
    



    This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:33:11 PDT