Re: Red Alert - Symantec Leaves Customers Exposed

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 02/24/04 

Date: Mon, 23 Feb 2004 22:27:24 -0500

....and Trend had pattern files for it ages ago. ;-)

David H. Lipman wrote:
> McAfee just release v4237 DAT files for this infector ;-)
>
> Dave
>
>
>
> "Admin" <Rat.***@Tattle.com> wrote in message
> news:guy_b.159$1k.24@okepread01...
>> This afternoon our gatway virus alarm indicated an outbreak of the
>> MY_DOOM.F virus. We received and are still receiving very high
>> volumes as of 19:20 CST 02/23/04. We do not use Symantec products
>> at the gateway level but do on some desktops. Just out of
>> curiosity, we pointed Norton Antivirus 2003 at the gateway virus
>> containment folder and guess what? Norton Antivirus didn't pick up
>> on the MY_DOOM.F.
>>
>> Symantec's website revealed that they knew about this virus as of
>> 02/20/04. They further state that MY_DOOM.F will be in the
>> LiveUpdate package as of 02/25/04. The current virus definitions
>> that are retrieved by LiveUpdate are 02/18/04. They also state that
>> LiveUpdates are released on Wednesdays. Handy info for those
>> releasing viurses into the wild.
>>
>> Whats the point of LiveUpdate checking for new definitions every 4
>> hours if they aren't going to release virus definitions in a timely
>> fashion? I know that you can manually download new definitions
>> ahead of LiveUpdate but I bet a significant number of people just
>> depend on LiveUpdate. Anyway, this may explain the outbreak that we
>> are seeing.
>>
>> After writing the above post, I see that they have now released a
>> 02/23/04 LiveUpdate versus 02/25/04 as of a few hours ago. Too
>> late, the horse is already out of the barn and they're trying to
>> cover their *** and hoped nobody noticed.
>>
>>
http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.f@mm.html

Loading