Random Virus Email

15:53.54 - Wednesday 18th February 2004   (Link to This Entry)

Looks like there's another new virus on the loose, and this time Norton isn't picking it up, which probably means it's very VERY new. I'm seeing short messages from random people to random addresses (I have half a dozen addresses all over) with either ZIP or EXE attachments.

I am assuming the ZIPs are corrupt packages which will execute arbitrary code when unpacked, so I'm not going to touch those, but I've saved an EXE and scanned it with Norton - nothing. Just done a LiveUpdate - nothing.

Random subjects:
'fake', 'stolen', 'hello'.

Random message body:
'you are bad', 'something is going wrong', 'you are a bad writer'.

Gonna have to warn a few ppl about this.

More Virus Fun

16:14.57 - Wednesday 18th February 2004   (Link to This Entry)

Closer examination of the three emails I've received shows they were all sent from the same IP address from within Demon Internet - and the resolved IP looks like it's one of our clients. I've spoken to a collegue about it and he's going to get in touch with them - it's his customer, after all.

Ironically, this is the client who used to pass on hoaxes without looking into them.

Edit:
I think I just found it - looks like it's the W32/Netsky-B Worm - good ol' Sophos.