Suspicious Emails announcment

[Calash]

There is a new virus that is generating the emails. W32/Bagle.j is the one we are fighting where I work, but the variants are very similar. The email headers are made to look like they are from an important source.

http://www.sarc.com has more information. If you open the zip file you get infected from what I understand.

[coan.net]

Yea, I had one come from the COAN.NET Team about my account being suppended.

HEY - I'm the COMPLETE COAN.NET team! I did not suppend my own account! :-)

[stevel]

You have to open the document in the ZIP file - just opening the zip is not sufficient to be infected.

The product support address I follow has been inundated with these...

[Calash]

Thats good to know. I thought it was similar to the last virus we had that only needed to have you unzip the file to infect you. It was a fake zip file that really was a exe.

We have had 4 virus definition updates this week...not a good week for us computer workers on the light side of the force.

[stevel]

You do need to be aware of what type of file you're dealing with. If it is something like a .zip.exe, then that is an exe which is unsafe to open. But it's also something that a virus scanner can look at.

The use of a password-protected ZIP with the password supplied separately poses problems for virus scanners, and also needs exceptionally gullible users to trigger. Unfortunately, there is no lack of those, and this latest variant could fool a lot of people.