Security & Virus Announcements

• [10:14:04 Jan 27, 2005]  AVERT Medium Threat Advisory: W32/Bagle.bj@MM UPGRADE
• [10:55:27 Dec 14, 2004]  AVERT Medium Threat Advisory: W32/Zafi.d@M
• [10:09:37 Nov 9, 2004]  Mydoom.ah
• [12:54:24 Oct 13, 2004]  Multiple Security Vulnerabilities in Microsoft Products
• [08:41:42 Sep 29, 2004]  AVERT Medium Threat Advisory: W32/Bagle.az@mm
• [10:21:25 Sep 23, 2004]  AVERT Low-Profiled Threat Notice: Exploit-MS04-028 UPDATE

AVERT Medium Threat Advisory: W32/Bagle.bj@MM UPGRADE
Thu Jan 27 10:14:04 2005

W32/Bagle.bj@MM has been Upgraded to Medium due to prevalence.
Information about W32/Bagle.bj@MM is located on VIL at:
http://vil.mcafeesecurity.com/vil/content/v_131351.htm
W32/Bagle.bj@MM was first discovered on 01/26/2005 and detection will be added to the 4423 dat files (Release Date: 01/26/2005). The EXTRA.DAT is available.

AVERT Medium Threat Advisory: W32/Zafi.d@M
Tue Dec 14 10:55:27 2004

W32/Zafi.d@MM has been deemed Medium due to prevalence.
Information about W32/Zafi.d@MM is located on VIL at:
http://vil.mcafeesecurity.com/vil/content/v_130371.htm
W32/Zafi.d@MM was first discovered on 2004/12/14 and detection will be added to the 4414 dat files (Release Date: 2004/12/14). The EXTRA.DAT is available.

Mydoom.ah
Tue Nov 9 10:09:37 2004

Another version of the Mydoom virus began making its rounds on November 7th. Details below:

W32/Mydoom.ah@MM has been deemed Medium Threat due to prevalence.
Information about W32/Mydoom.ah@MM is located on VIL at: http://vil.nai.com/vil/content/v_129631.htm

W32/Mydoom.ah@MM was first discovered on November 8, 2004 and detection will added to the 4405 dat files (Release Date: November 9, 2004). The EXTRA.DAT is available via the VIL description.

Multiple Security Vulnerabilities in Microsoft Products
Wed Oct 13 12:54:24 2004

Overview
By taking advantage of one or more vulnerabilities in Microsoft products, an attacker may be able to take control of your computer.

Solution
Apply updates Microsoft has released security updates for a number of products, including Windows, Internet Explorer, and Excel. To obtain the updates, visit the Windows Update and Office Update web sites. US-CERT also recommends enabling Automatic Updates.

Description
There are vulnerabilities in multiple Microsoft products, including Windows, Internet Explorer, and Excel. Many of these vulnerabilities could allow an attacker to take control of your computer. In some cases, an attacker could exploit a vulnerability without any action from you. In other cases, you would need to open a malicious document such as a web site, email message, image, or Excel spreadsheet.