Re: [Full-Disclosure] new virus:

["Mary Landesman" <mlande@xxxxxxxxxxxxx>]

It sounds like it might be the new Swen worm. According to Symantec:

The worm can also impersonate mail delivery failure notices, attaching
itself as a randomly named executable.

One example is:

I'm sorry I wasn't able to deliver your message to one or more destinations.

http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@xxxxxxx

Regards,
Mary Landesman
Antivirus About.com Guide
http://antivirus.about.com


----- Original Message ----- 
From: "Ron Clark" <ron@xxxxxxxxxxxxxxxxxxxxx>
To: <full-disclosure@xxxxxxxxxx>
Sent: Friday, September 19, 2003 10:38 AM
Subject: [Full-Disclosure] new virus:



Has anyone seen an email going around with subject bug message
containing a supposed audio attachment that is really an exe named
ckcwr.exe.

Is this a possible new virus? I have recieved numerous cpoies of this
email since last night.

Ron Clark
System Administrator
Armstrong Atlantic State University

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html