OT - New Linux virus

Just came in the mail ...

[ RAV AntiVirus for Linux i686 version: 8.3.2 (snapshot-20020108)

----------------------- HOL Antivirus results

-----------------------

The file (part0000:)->(IFRAME0000) attached to mail (with subject:mail user unknown)

is infected with virus: HTML/IFrame_Exploit*. Cannot clean this file. The file was successfully deleted by HOL AntiVirus. The file (part0001:akqigotg.exe) attached to mail (with subject:mail user unknown) sent by snipped-for-privacy@memibeachcamping.gr to snipped-for-privacy@connect.to,

]

I note many addresses from AMC & comp.cad.solidworks on the TO list .... and a lot I don't know.

Looks like everyone the virus tried to send to may have gotten a warning Emailed to them .... this time from this ISP. Not a thing to count on in the future from other ISPs.

Reply to
Cliff Huprich
Loading thread data ...

As far I can see from your post this is not a Linux virus but Rav anitvirus in running on linux (i686) Probably on a P4 system or Athlon.

Johnny

Reply to
Johnny Geling

Sorry, tired at the time ... Probably an MS targeted virus dettcted by the software on the Linux mailserver. It sent the warning only; never saw the virus. Looked like a new one to me though and it was sent (or tried to) to folks in newsgroups. Other ISPs may not be running the anti-virus on their mail servers for outging mail .... so perhaps we can expect live ones.

Reply to
Cliff Huprich

Cliff,

I did a little STI* on this virus:

formatting link
If it is a Linux virus it is good not know that MicroSoft is issuing a security patch for it. :)

*STI -- Search The > Just came in the mail ...
Reply to
kellnerp

PolyTech Forum website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.