FYI - W32.Beagle.AO@mm launched today

[vi edit]

http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.ao@mm.html

This slipped past gateway & desktop level scanners before an update came through. Thankfully users were smart enough not to open it up.

 

[BigJ]

Now if this thread follows suit, a bunch of people are gonna come in here and flame you for actually being helpful and making people aware.

Thanks for the update, although I still can't see how or why people still open up files from unknown sources.

 

[neutralizer]

Do we really need so many threads on this?

 

[vi edit]

Originally posted by: neutralizer
Do we really need so many threads on this?

I did a search for "beagle" and found nothing. This was just recognized by Symantec. Up until a couple hours ago there were no definitions for it. I had several of these that showed up in my users inboxes oblivious to my mail and destop antivirus software.

THAT is a big problem. "Day Zero" viruses can crush you hard if you aren't prepared.

 

[neutralizer]

Originally posted by: vi_edit

Originally posted by: neutralizer
Do we really need so many threads on this?

I did a search for "beagle" and found nothing. This was just recognized by Symantec. Up until a couple hours ago there were no definitions for it. I had several of these that showed up in my users inboxes oblivious to my mail and destop antivirus software.

THAT is a big problem. "Day Zero" viruses can crush you hard if you aren't prepared.

http://forums.anandtech.com/messageview.cfm?catid=38&threadid=1370755&highlight_key=y&keyword1=virus

spelt it wrong. and other threads just said price virus.

 

[Jzero]

Originally posted by: vi_edit
THAT is a big problem. "Day Zero" viruses can crush you hard if you aren't prepared.

If you aren't using rules-based filters, you aren't prepared. I'm starting to sound like a broken record 🙁
These viruses never even get to my definitions-based scanners.

 

[vi edit]

Originally posted by: Jzero

Originally posted by: vi_edit
THAT is a big problem. "Day Zero" viruses can crush you hard if you aren't prepared.

If you aren't using rules-based filters, you aren't prepared. I'm starting to sound like a broken record 🙁
These viruses never even get to my definitions-based scanners.

I'd *LIKE* to block zip based attachments but too many of our business partners use it for correspondence. What do you do for rules to prevent it?

 

[Stark]

stupid POS virus makers.

We've been getting this today. I friggin searched sarc and msuckee for price.exe and nothing came back (shoulda checked here). Liveupdate doesn't pull the new defs that get it yet.

Looks like i get to do some cleaning tonight. 🙁🙁

AAAARRRRRGGGG!!