RE: New/recent virus outbreak

"Tallat Haq" <[email protected]>
Newsgroups gmane.comp.security.virus
Message-ID <000001c545f5$b5e64bc0$0201a8c0@2>
My AVG has been catching these for the last few days

-----Original Message-----
From: Beauford, Jason [mailto:[email protected]]
Sent: 20 April 2005 22:22
To: Dan Denton; 
Subject: RE: New/recent virus outbreak


I've seen these recently yes.  My antivirus (Symantec Corporate) caught
it.

-jmb

-----Original Message-----
From: Dan Denton [mailto:[email protected]] 
Sent: Wednesday, April 20, 2005 3:37 PM
To: [email protected]
Subject: New/recent virus outbreak


Have anyone seen any virus infected emails coming from addresses with
usernames identical to those on your own email servers, but from domains
like hotmail.com or netzero.com ? These emails seem to be sent from a
spoofed email address such as [email protected], and are sent to
[email protected]. 

Also, the attached files are always zip files, and have been named
4.zip, 5.zip, 6.zip, and work.zip .

A bounce message from one of our customers suggests they blocked an
email from on of our users that was infected with trojan.tooso.F, but
the emails stopped don't exhibit those characteristics, And even
Symantec's write-up says this virus doesn't send it's own emails.

Is it possible there's a beagle variant that is spreading the Tooso
trojan as part of it's payload? Thanks in advance.

Dan Denton
Information Technology Manager, CCNA
Pay-LESS Office Products
-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.10.1 - Release Date: 20/04/05

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.10.1 - Release Date: 20/04/05
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.