Re: [Full-Disclosure] New Virus under way ...

[Nick FitzGerald <nick@xxxxxxxxxxxxxxxxxxx>]

"Helmut Hauser" <helmut_hauser@xxxxxxxxxxx> wrote:

> got a strange Mail 2day:
> 
> Subject: RE: Protected message
> From: 20030814171411.10246.qmail@xxxxxxxxxxxxxxx
> 
> link to virus is ...
> http://<IP>:81/100721.php
<<snip>>

It will have been one of the new Bagle variants discovered in the last 
few hours -- Bagle.Q (though some vendors had already named this with 
an earlier variant ascription), Bagle.R and Bagle.S all fit the 
description, and possibly the just discovered (within the last hour or 
so) Bagle.T...  (The vendors should be in agreement as to the names of 
the last three.)


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html