BleepingComputer.com: New Bagle.dp Variant - "february Price" Theme

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

New Bagle.dp Variant - "february Price" Theme

#1 User is offline   harrywaldron 

  • Security Reporter
  • PipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 509
  • Joined: 10-April 04
  • Gender:Male
  • Location:Roanoke, Virginia

  Posted 03 February 2006 - 06:05 AM

While most companies can effectively block this, it may be tough in cases where ZIP attachments are allowed and AV signature files haven't been published yet. The golden rule is to never open attachments.

New Bagle.DP Variant - "February Price" theme
http://secunia.com/virus_information/26794/bagle.dp/
http://vil.nai.com/vil/content/v_138366.htm

Quote

EMAIL FORMAT TO BLOCK OR AVOID

From: [SPOOFED]

Subject: price, February price

Message body: price, February price

Attachment:
price.zip
pricelst.zip
pricelist.zip
price_lst.zip
new_price.zip
21_price.zip
February price.zip
February_price.zip


#2 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,518
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 11 February 2006 - 08:18 AM

Quote

Once the worm has infected a computer, it attempts to disable anti-virus and other security software. The worm also attempts to spread itself via file-sharing networks, posing as a number of different files, including a beta of Windows Longhorn, hardcore pornography, or a copy of Adobe Photoshop 9.

http://itvibe.com/news/3921/
Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users