Newer Mytob variant

[Art]

Received a variant via email of what Kaspersky calls
Net-Worm.Win32.Mytob.bi
Three different emails with different zip attachments got through my
ISP's malware blocking (I think they use a Symantec product).
They were the same old type of message pretending
to come from your ISP. However, I uploaded to Virus Total and
found that the following av products did not alert:

AVG
Bit Defender
Clamav
Dr Web
eTrust-Iris
Norman
NAV

So beware. Always follow the rule of deleting unsolicited email
attackments. Don't rely on your av or your ISP's av. Use your head
instead

Art

http://home.epix.net/~artnpeg

 

[Eric Parker]

Received a variant via email of what Kaspersky calls
Net-Worm.Win32.Mytob.bi
Three different emails with different zip attachments got through my
ISP's malware blocking (I think they use a Symantec product).
They were the same old type of message pretending
to come from your ISP. However, I uploaded to Virus Total and
found that the following av products did not alert:

AVG
Bit Defender
Clamav
Dr Web
eTrust-Iris
Norman
NAV

So beware. Always follow the rule of deleting unsolicited email
attackments. Don't rely on your av or your ISP's av. Use your head
instead

Art

http://home.epix.net/~artnpeg

Thanks for the warning.
Sad you should get abuse for doing so.

eric

 

[Ian Kenefick]

AVG
Bit Defender
Clamav
Dr Web
eTrust-Iris
Norman
NAV

So beware. Always follow the rule of deleting unsolicited email
attackments. Don't rely on your av or your ISP's av. Use your head
instead

Thanks for this Art. Interesting Norman Sandbox and Bitdefender HIVE
did not pick this up.