RE: New virus

Just got the following email

Advisory
This is a Medium Virus Advisory for W32/Mimail@MM.

Justification
W32/Mimail@MM has been deemed Medium due to its prevalence.

Read About It
Information about W32/Mimail@MM is located on VIL at: http://vil.nai.com/vil/content/v_100523.htm

Detection
W32/Mimail@MM has been proactively detected since the 4272 DAT files as Exploit-Codebase. True name
detection as W32/Mimail@MM will be added to the 4282 dat files (Release Date: 08/06/2003). The
EXTRA.DAT will be available soon.

If you suspect you have W32/Mimail@MM, please submit a sample to http://www.webimmune.net.

Risk Assessment Definition
For further information on the Risk Assessment and AVERT Recommended Actions please see:
http://www.networkassociates.com/us/security/resources/risk_assessment.htm

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Regards

AVERT

                                                                                                                                                   
                      "Shepherd, William N"                                                                                                        
                                                cc:                                                                                     
                                                           Subject:  RE: New virus                                                                 
                      08/01/2003 12:57 PM                                                                                                          
                                                                                                                                                   
                                                                                                                                                   

I received a notice from Trend about 1 1/2 hours ago and I've already block 50 E-mail's.

William Shepherd
E-mail Administrator/AntiVirus Administrator International Truck and Engine Corporation Phone 937.390.4022
Internet mailto:William.Shepherd@Nav-Internaitonal.com

-----Original Message-----

From: Schmehl, Paul L [mailto:pauls@utdallas.edu] Sent: Friday, August 01, 2003 1:54 PM
To: focus-virus@securityfocus.com
Subject: New virus

If you don't already know about this, block message.zip. It's hitting right
now.
http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.a@mm. html

Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/