Re: [Security] new virus (HLLW.Mankx/PALYH)

Date view Thread view Subject view Author view Attachment view

From: Allen Chang (allen_at_rescomp.berkeley.edu)
Date: Mon May 19 2003 - 01:08:09 PDT

Detected as W32.HLLW.Mankx_at_mm by Symantec/Norton

http://www.symantec.com/avcenter/venc/data/w32.hllw.mankx_at_mm.html

Removal tool available:
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.mankx.removal.tool.html

Thanks to uclink for the help! Our bandwidth usage was heading through the
roof.

Allen Chang
Network Security Coord.
ResComp

On Mon, 19 May 2003, Jerome M Berkman wrote:

>
> A new virus, WORM_PALYH.A, appeared Sunday evening. It is supposedly
> from support_at_microsoft.com. It started hitting hard about 6-7 p.m.
> UCLink users received over 50000 copies. We are now blocking it and
> also extracting it from users inboxes. However, I am sure many copies
> were downloaded by users whose PC's check for mail automatically every
> few minutes.
>
> Remind your users, never open an attachment unless you expect it!
>
> - Jerry Berkman, UCLink Support
>
> -------------------------------------
> Sent via the ucb-security mailing list.
>

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.

Date view Thread view Subject view Author view Attachment view

This archive was generated by hypermail 2.1.5 : Mon May 19 2003 - 01:19:08 PDT