Re: Reappearing W32.Beagle.AW@mm worm

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/03/04 

Date: Thu, 2 Dec 2004 21:17:39 -0500

Yes. Just another infection transfer method.

Dave

"jerry" <jerry@discussions.microsoft.com> wrote in message
news:3A60524A-081A-4B77-BFE7-54C156AF4786@microsoft.com...
| Yeah, I have an iPAQ cradled to my desktop. Do you think it's coming from an
| email message on it?
|
| "David H. Lipman" wrote:
|
| > Looks like it is coming through a device using ActiveSync. Do you have a Blackberry or
some
| > other wireless mail device ?
| >
| > What's connecting to ActiveSync ?
| >
| > Dave
| >
| >
| >
| > "jerry" <jerry@discussions.microsoft.com> wrote in message
| > news:50446851-2AC5-4531-AD03-37E8D5F16926@microsoft.com...
| > | I'm running Symantec AntiVirus Corporate Edition (fully updated definitions)
| > | on my XP desktop, and it keeps quarantining instances of the Beagle worm, yet
| > | when I run the removal tool from Symantec, it finds nothing. Is it the same
| > | worm that keeps writing itself onto my computer, or is my antivirus program
| > | just catching multiple instances of the worm from my email program? It
| > | always finds the worm in the following folder: c:\Documents and
| > | Settings\Jerry\Local Settings\Application Data\ActiveSync, and the file is
| > | named 'joke.com'. Running a full system scan with my antivirus programs
| > | yields no results either. Any help would be appreciated. Thanks.
| >
| >
| >

Relevant Pages

  • Re: Reappearing W32.Beagle.AW@mm worm
    ... email message on it? ... > | on my XP desktop, and it keeps quarantining instances of the Beagle worm, yet ... > | worm that keeps writing itself onto my computer, or is my antivirus program ... > | just catching multiple instances of the worm from my email program? ...
    (microsoft.public.security.virus)
  • heads up: worm on the loose
    ... while doing my monthly audit today on my company's external boxes (gateways, ... inspection turned out to be source code to a new internet worm... ... reformatted...i was not going to let my mail server be used to launch ... // by _dave ...
    (Incidents)
  • Re: Help on install of service pak4
    ... Sounds like the download may be bad try downloading again on another pc that ... Dave Patrick ....Please no email replies - reply in newsgroup. ... at service pack 2 to be able to run the software. ... antivirus software and on two occasions it did find the worm and remove it. ...
    (microsoft.public.win2000.general)
  • Re: Front Mech is a total wanker.
    ... There's a worm at the bottom of the garden ... Is wriggle all night ... Dave - Cyclists VOR. ...
    (uk.rec.cycling)
  • Re: Swen is not alone in posting to UseNet as a Microsoft patch, add the Torvil worm
    ... Dave ... "I just thought it was worth mentioning because the worm too uses Microsoft Masquerading as ... |> another infector now showing up in UseNet News Groups. ... |> technique to spread. ...
    (microsoft.public.security.virus)