New variant of Bagle email worm (Bagle.AF) has been found in
several parts of the world. This one seems to be based on the
source code distributed with the Bagle.AA worm over a week ago.
It sends highly variable emails with infected attachments. credit first service union
We are upgrading Zafi.B to level 2 due to increased number
of infections. Zafi.B sends emails in many different languages
with variable content and .pif attachment. It disables security
applications and tools. card credit discover service
Several new Korgo variants are spreading. All of them are
network worms that exploit the LSASS vulnerability (MS04-011).
They listen on different TCP ports allowing unauthorized
access. card credit processing service
F-Secure is increasing the level of Sober.G to Radar 2 as we
are seeing increased numbers of it during the weekend. It sends
emails in both German and English with varying content and
attachments. card credit service wireless
Wallon worm is spreading mostly in Europe. It does not send
attachment but an HTML email that contains a link. In order to
spoof the original web location, it uses the Yahoo redirection
service. credit report service
Internet worm known as Sasser has been found. This worm
exploits the new LSASS vulnerability in Windows 2000 and XP
systems. It s not destructive. Generates traffic at ports
445, 5554 and 9996. christian counseling credit
Two new worms are spreading today - Netsky.AB and Bagel.Z.
Netsky.AB attachment file s extension is always
.pif . Bagle.Z is similar to Bagle.Y variant, but
does not send images in its e-mails. credit monitoring service
A new Netsky.X has been found and it is currently spreading
mostly in Europe. It sends emails in several different
languages. The attachment file s extension is always
.pif . card credit online service
Email worm Sober.F is spreading, mostly in Central Europe.
It sends highly variable German and English emails which always
have a variably named PIF or ZIP attachment. The virus is 42496
bytes long. card credit fleet service
A new Bagle.U worm was found spreading in the morning on
March 26th. It sends emails with an empty subject, no body text
and a randomly named attachment. It has a backdoor that listens
to port 4751. credit free online report
Netsky.P worm is spreading faster. It uses a new approach to
install itself - the worm is spreading as a dropper and
installs itself as a DLL file. It can spread via e-mail and to
local and netwok drives. consumer credit service
New automatic network worm known as Witty is spreading
through direct network connections (from UDP port 4000),
targeting only computers that are running BlackIce firewall. It
won t send any mails. credit reporting service
Three new Bagle variants (Q, R, S) are spreading in the
wild. They do not send messages with attachments but with a
HTML exploit. This exploit will download and run an executable
from web servers installed to infected machines by previous
versions of Bagle. credit free report service
Bagle.N is spreading fast. It sends itself in variable
emails as PIF/EXE attachments, which can be packed inside
ZIP/RAR archive, which can be encrypted. Password can be shown
as a BMP/GIF/JPG image. credit repair report service
New Sober.D was found spreading mostly in Europe. It sends
emails in both German and English and pretends to be a MS
update to remove Mydoom. The infected email comes from a fake
Microsoft address. cic credit monitoring service
The 10th variant of Bagle during the last 5 days (Bagle.J)
is spreading in-the-wild. Bagle.J sends random emails with
encrypted ZIP attachments, containing an executable with a
Wordpad icon. credit service union worker
Two more Bagle worm variants(F and G) are spreading. They
can send password-protected ZIPs, mentioning the password in
the message. They use a deceiving icon for the attachment,
looking like a folder. card chase credit customer
Netsky.D has been found. It is already spreading very
rapidly. It sends emails with random subject, one line of
English text and a random PIF attachment. It will play weird
beeping sounds on March 2nd. citi credit monitoring service
We are upgrading Netsky.D to a Level 1 Alert, as it
continues to spread at almost record-breaking speeds.
Apparently the worm was started earlier today by spamming it to
a large set of email addresses. credit farm service
Email worm Bagle.C is spreading with increasing intensity.
The previous B variant stopped spreading three days ago.
Bagle.C sends random emails with a zipped EXE attachment,
looking like an Excel spreadsheet. credit paychex service tax
Three different Bagle variants have been found in the wild
during the last 24 hours. Variants C, D and E are all spreading
via email. C and D will stop spreading on March 14th, variant E
on March 25th. aeon credit service
F-Secure is raising Mydoom.F to Level 2 because of increased
prevalence. It was found on Friday but the outbreak really
started yesterday. Mydoom.F randomly deletes document and data
files. bad cell credit phone service
New variant of the Netsky worm is spreading rapidly. Known
as Netsky.C, it sends emails with random contents and a ZIP or
EXE attachment. It also spreads over p2p networks and shared
folders. card credit payment service
A new worm NetSky.B was found spreading in the wild on 18th
of February 2004. The worm arrives in e-mails inside a ZIP
archive or as an executable attachment. It also copies itself
to shared folders. counseling credit family
Bagle.B worm was found on February 17th, 2004. It was seeded
in messages with random subject and attachment name. Bagle.B is
spreading quickly but has been programmed to stop on February
25th. area bay credit service
F-Secure is upgrading Bagle.B worm to Level 1, as it keeps
spreading rapidly. It arrives in email with random subject and
attachment name with an EXE extension. The worm installs a
backdoor. account card credit merchant
A new network worm known as Doomjuice has been found. It
infects machines which are already infected by Mydoom.A. It
does not spread over email. Doomjuice launches an attack
against www.microsoft.com card counseling credit service
A modified variant of Mydoom virus has been found. Mydoom.B
attacks both www.sco.com and www.microsoft.com and prevents
infected machines from accessing antivirus sites, including
www.f-secure.com. consolidated counseling credit
F-Secure is upgrading the Mydoom (Novarg) worm to Level 1
because of increased infection reports around the world. The
worm sends email attachments ending with ZIP, BAT, CMD, EXE,
PIF or SCR extension. card credit online payment
A new worm known as Mydoom or Novarg is spreading quickly
over email and Kazaa networks. In emails, it uses variable
subjects, bodies and attachment names. The worm opens Notepad
with garbage data in it. It also attacks sco.com with a
DDoS-attack. antonio credit san security
F-Secure solutions for enterprises clean credit repair service
F-Secure Mobile Anti-Virus F-Secure Mobile Security
F-Secure Anti-Virus Client Security Renewals Upgrades
Customer support Return Policy General Terms and Conditions
F-Secure License Terms eStore Products Support
Downloads Press and News Weblog Contacts
- Asia / Ocean Pacific
- India
- Japan store
- International store
- Hong Kong
- Singapore
- Australia and Oceania
- Middle East/Africa
- International store (Euro)
- International store (USD)
- Suomi/Finland
- Norsk/Norway
- Svenska
- Dansk
- Espa=ol
- Deutsch
- France
- Italy
- Poland
- Schweiz
- Slovenia
- United Kingdom
- 0sterreich/Austria
- Euro Store
- US / International store
- Canada
- America Latina
Awards and Recognitions Investor Relations Careers
Event Calendar Marketing eStore Products Support Downloads
Press and News Weblog Contacts F-Secure.com F-SECURE
ABOUT F-SECURE
Contact Information credit management service
Regional Channel Managers
Contacting F-Secure Sales and Customer support
Corporate Headquarters F-Secure Corporation Tammasaarenkatu
7 PL 24 00181 Helsinki Finland Tel. +358 9 2520 0700 Fax +358 9
2520 5001 Tel. (09) 2520 0700 -- in Finland only Fax (09) 2520
5001 -- in Finland only timezone: EET = East-European time =
GMT+2h = CET+1h = EST+7h = PST+10h Email:
helsinki@f-secure.com Driving Instructions to the Main
Office in Helsinki colorado credit public service
Direct telephones: Technical Support: +358 9 2520 5050 consolidation counseling
North American Headquarters
F-Secure Inc. 100 Century Center Court, Suite 700 San Jose,
CA 95112, USA Tel: (888) 432-8233 Fax: (408) 350-2339 Consumer
Technical Support 866-295-2725 Corporate Technical Support
888-432-8233 option 4, option 1 timezone: PST = Pacific
Standard Time = GMT-8h = CET-9h = EET-10h Email:
sanjose@f-secure.com bureau card credit service
Driving Instructions to San Jose Office
Asian Regional OfficeS
Japan
Nihon F-Secure Corporation Sky Bldg. 23F, 2-19-12
Takashima, Nishi-ku, Yokohama 220-0011 Japan Tel.
+81-45-440-6610 Fax +81-45-440-6616 Email:
japan@f-secure.com www.f-secure.co.jp
Singapore F-Secure Pte Ltd No. 9 Jurong Town Hall Road
#02-06 The iHub Singapore 609431 Tel. +65 62553720 Fax +65
62555846 Email: singapore@f-secure.com card credit customer service
Malaysia
F-Secure Malaysia Suite 2A-18-2 Plaza Sentral, Jalan Stesen
Sentral 5, 50470 Kuala Lumpur Malaysia Tel. +603 22640200 Fax
+603 22640299 Hong Kong F-Secure Hong Kong
Suite 3703, Level 37, Office Tower Langham Place, Mongkok,
Kowloon Hong Kong Tel. +852 2989 1933 Fax. +852 2989 1922 Email
hongkong@f-secure.com India F-Secure Pvt
Ltd credit financial service
410, Fourth Floor, Peninsula Plaza, Veera Industrial Estate
Andheri (West) Mumbai 400 053 India Tel: +91-22-2674-4137 Tel:
+91-22-2674-4147 Fax: +91-22-2674-4347 card citibank credit customer
European Regional Offices
Belgium bad credit repair service
F-Secure Corporation c/o Jo Van Winckel Interleuvenlaan 62,
Zone 2, Bus 56 3001 Heverlee - Leuven Belgium Tel: + 32 16 39
47 35 Fax: + 32 16 39 47 37 budget counseling credit
Denmark credit equifax information
F-Secure Corporation credit first houston service
International House Center Boulevard 5 DK-2300 Kvbenhavn S
Telephone: +45 32 47 33 47 Mobile: +45 26 29 88 47 bad credit expertise in
Finland: Helsinki (Main office) cccs consumer counseling
Driving Instructions to the Main Office in Helsinki
Finland: Oulu Elektroniikkatie 3 90570 Oulu
Fax +358 8 551 3701 Fax (08) 551 3701 -- in Finland only
Antivirus Support: +358 9 2520 5050 (09) 2520 5050 -- in
Finland only credit household service
France
F-Secure SARL 3, rue Gustave Eiffel Espace Media - Le
Technoparc 78306 POISSY Cedex France Tel. +33 (0) 1 39 22 64 19
Fax: +33 (0) 1 39 22 30 02 Email: france@f-secure.com
Germany F-Secure GmbH Ganghoferstra=e 29 a 80339 M
nchen Germany Tel. +49 89 787467-00 Fax +49 89 787467-99
General Email: germany@f-secure.com Support
Email: support-de@f-secure.com credit monitoring report
Germany Technical Support : +49 89787 467 300 (free of
charge) Italy Via Giorgio Stephenson, 43/A 20157 Milano
Italy Tel. +39 (0)2 38093590 Fax +39 (0)2 38093591 General
Email: italy@f-secure.com credit creek pacific service
The Netherlands california consumer counseling
F-Secure B.V. Newtonlaan 115 3584 BH Utrecht The Netherlands
Tel +31 (0)30 2106 243 Fax +31 (0)30 2106 244 capital card credit one
Norway Nydalsveien 33 credit pacific service union
0484 Oslo Norway Tel: +47 21 52 00 62 Fax: +47 21 52 00
10 credit first service union
Poland
F-Secure Sp.z.o.o. ul. Hrubieszowska 6a 00-209 Warszawa
Poland Tel: +48 22 431 82 21 Fax: +48 22 431 82 20
Sweden F-Secure AB Box 717 (postal address)
16927 SOLNA, Sweden Grdsv gen 18 (visiting address)
16970 SOLNA Sweden Tel. +46 8 507 440 00 Fax +46 8 507 440 01
Email: sweden@f-secure.com card credit mobile service
www.f-secure.se
United Kingdom F-Secure UK Limited Mercury
Park Wycombe Lane Wooburn Green High Wycombe Buckinghamshire
HP10 0HH United Kingdom Tel: + 44 (0) 845 890 3300 Fax: + 44
(0) 845 890 3301 Email: uk@f-secure.com UK
Technical Support : 0870 240 8321 (calls charged at national
rate) card credit discover service
World-Wide Email/Web/FTP Info
E-Mail
Internet: info@f-secure.com CompuServe:
TO:internet:info@f-secure.com MCI Mail: EMS:INTERNET;
MBX:info@f-secure.com X.400: S=info O=datafellows PRMD=inet
ADMD=mailnet C=fi Internet Select your local
site on the left Anonymous FTP in the US:
ftp.f-secure.com Anonymous FTP in Europe:
ftp.europe.f-secure.com Last modified: Nov 8,
2007 credit public service union
F-Secure.com Malicious PDF files being spammed out in
volume
Corporate News News Archives Media Contacts Newsletter
Protected PR Material Coverage Subscribe to F-Secure Mailing
Lists Awards and Recognitions Investor Relations Careers Event
Calendar Marketing
eStore Products Support Downloads Press and News Weblog
Contacts F-Secure.com F-SECURE
ABOUT F-SECURE
Pressroom Corporate News Malicious PDF files
being spammed out in volume card credit processing service
Malicious PDF files being spammed out in
volume
Oct 26, 2007 F-Secure has been monitoring a large mailing of
malicious PDF files. These PDF files exploit a recent
vulnerability. When such PDF files are viewed on vulnerable
machines, they get infected. An unknown party has been sending
out tens of thousands of mails with Subject-lines like: Your
credit report Personal Financial Statement Your Credit File
Balance Report The mails contain no mail body, only an
attachment called report.pdf . When opened, the PDF
file uses the CVE-2007-5020 vulnerability via Acrobat Reader
and IE7 and downloads further malware from a server in
Malaysia. The target of the malware seems to be to create a
botnet of infected machines to be used for further malicious
activity. center credit service union
We re worried about this case, as PDF attachments
are typically not filtered at email gateways , says
F-Secure s Chief Research Officer Mikko Hypponen.
Executable files are now stripped almost everywhere, but
PDF is stripped almost nowhere . card credit service wireless
monebaggasse