There
is a sneaky virus out there. It's called W32/Bagle.j@MM. Yeah. Try
reading it out loud five times and give yourself a big pat on the
back if you scored 100%. The virus has several delivery methods
but the one we've come across the most is the one that fakes it's
your email server. Looks something like this (note the immaculate
spelling):
~~~~~~~~~~~~
Dear
user of e-mail server "iav.com",
Our
antivirus software has detected a large ammount of viruses outgoing
from your email account, you may use our free anti-virus tool to
clean up your computer software.
Pay
attention on attached file.
For security purposes the attached file is password protected. Password
is "53756".
Have
a good day,
The iav.com team http://www.iav.com
~~~~~~~~~~~~
According
to symantec.com, "the virus is a mass-mailing worm that opens
a backdoor on TCP port 2745 and uses its own SMTP engine to spread
through email. Sends the attacker the port on which the backdoor
listens, as well as the IP address. Attempts to spread through file-sharing networks, such
as Kazaa and iMesh, by dropping itself into the folders that contain "shar" in their names."
Don't
understand this? That's why we are in business.
Got this in your inbox? Delete it.
Opened it by accident? Give us a call: 949-6888. We'll fix
it.
|