I usually won't post anything like this unless it's disastrous. My e-mail server updates its AV signatures once every 8 hours. This virus propagated yesterday around 10:30 AM EDT, and by 12 PM EDT, I'd already gotten over 30 copies of it. Thankfully one of my users spotted the suspicious e-mail and I caught it early on, but I'm just letting it be known that even if you update your AV signatures every 8 hours, it won't get everything. I've changed the scheduler on my e-mail server to check for updated AV signatures once every hour now. 
Kaspersky labels this worm as I-Worm.Bagle.al, and lists it as moderate risk: http://www.viruslist.com/eng/alert.html?id=2011913
McAfee lists it as W32/Bagle.aq@MM and Symantec lists it as W32.Beagle.AO@mm.
If you care to read about what the virus does, it's pretty interesting. I got a nice chuckle out of it. 
Update your virus signatures, and as always be very careful when you open suspicious e-mails. You don't need to update yours every hour, but this just goes to show you how important it is to do on a regular basis. |
