Re: [SAGE] tainted sage-members email

[Cat Okita <cat@reptiles.org>]

On Mon, 19 Jan 2004, Rob Kolstad wrote:
> I note that I just received what appears to be spam on the sage-members
> list.  Being as how it contains a .exe file, it might be dangerous
> spam.

It's the well documented and annoying 'Beagle' virus:

http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.a@mm.html

W32.Beagle.A@mm

Discovered on: January 18, 2004
Last Updated on: January 19, 2004 04:46:41 PM



W32.Beagle.A@mm is a mass-mailing worm that will only work until 28th of
January. This worm will insert several files and registry keys on the
system. It will also access remote websites, and email all contacts it
can find. The emails sent by this worm will have the following characteristics:

Subject: Hi
Message:
Test =)
<Random characters>
--
Test, yep.
Filename: <Random>.exe
Filesize: 16Kbytes

Also Known As: 	I-Worm.Bagle [Kaspersky], WORM_BAGLE.A [Trend]

Type: 	Worm
Infection Length: 	16 Kbytes



Systems Affected: 	Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: 	DOS, Linux, Macintosh, Microsoft IIS, OS/2, UNIX, Windows 3.x

==========================================================================
"A cat spends her life conflicted between a deep, passionate and profound
desire for fish and an equally deep, passionate and profound desire to
avoid getting wet.  This is the defining metaphor of my life right now."