[33547] in bugtraq
RE: Outbreak warning: possibly Mydoom.C (Now Deadhat/Vesser)
daemon@ATHENA.MIT.EDU (Larry Seltzer)
Mon Feb 9 18:21:24 2004
From: "Larry Seltzer" <larry@larryseltzer.com>
To: <bugtraq@securityfocus.com>
Date: Mon, 9 Feb 2004 17:02:58 -0500
Message-ID: <022a01c3ef58$877c0bc0$5b00005a@moregarlic.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <40289477.23172.1F1A9070@localhost>
All the AV companies are calling this new outbreak "Doomjuice"
Symantec: http://www.sarc.com/avcenter/venc/data/w32.hllw.doomjuice.html
McAfee: http://vil.nai.com/vil/content/v_101002.htm
Sophos: http://www.sophos.com/virusinfo/analyses/w32doomjuicea.html
Trend: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DOOMJUICE.A
Etc.
They all have it as a low-incidence in the wild. What I don't understand is that if it
hasn't spread, what caused the attack against Microsoft this morning?
Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
larryseltzer@ziffdavis.com
