[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-virus
Subject:    RE: Information about I-Worm.VB.c
From:       "Dowling, Gabrielle" <dowlingg () sullcrom ! com>
Date:       2004-04-05 17:20:45
Message-ID: B7C2C6BA798F3C4DBDD78BEDC1F8AD570963721D () nycmb01 ! law ! sullcrom ! com
[Download RAW message or body]

That is Sober-F....
http://www.sarc.com/avcenter/venc/data/w32.sober.f@mm.html

-----Original Message-----
From: Adrian Senn [mailto:adrian@senn.ch] 
Sent: Sunday, April 04, 2004 4:03 AM
To: focus-virus@securityfocus.com
Subject: Information about I-Worm.VB.c


Hello together

I was wondering today about our internal virus scanner. He deleted some
files with the extension .pif. The name was AMD-System.txt.pif,
Datenbank_Auszug.pif, Benutzer-Daten.pif, Text-Inhalt.pif,
Block-Lists.pif and so on. The sender address is faked with
Schwarze-Liste@ Fehler-Info@ RobotMailer@ Register@ Kundenservice@
Administrator@ Info@ and possible others absender addreses.

I checked the files with the kaspersky online virus scanner and they
found it should be I-Worm.VB.c.

At the moment this is the only information the virus. I didn't found any
information on the other virus scanner webpages (f-secure, Symantec,
TrendMicro)
I made also an online scan with Trends House Call and the Virus wasn't
detected.

Is this a knew form of a virus? I think it should be. And many scanners
will fail at the moment. The virus was comming from an Cable Account of
tiscali.nl.

I hope anybody has more information about this variant.

Kind regards Adrian Senn

-- 

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

------------------------------------------------------------------------
------
Astaro Security Linux - firewall with spam & virus protection, VPN -free
trial

Protect your network with the comprehensive security solution that
integrates 
six applications for ease of use and lower TCO.

- Firewall
- Virus protection
- Spam protection
- URL blocking
- VPN
- Wireless security

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_focus-virus_030329 
------------------------------------------------------------------------
----



**********************************************************************
This e-mail is sent by a law firm and contains information
that may be privileged and confidential. If you are not the 
intended recipient, please delete the e-mail and notify us 
immediately. 
***********************************************************************


------------------------------------------------------------------------------
----------------------------------------------------------------------------



[prev in list] [next in list] [prev in thread] [next in thread]