W32.Pandem.C.Worm... virus September 02, 2003

RASTABT · Sep 2, 2003

W32.Pandem.C.Worm is a worm that attempts to spread by emailing itself to contacts in the Microsoft Outlook Address Book, and through file-sharing applications and ICQ.

The worm is written in C++ and is packed with PEBundle.
Variants: W32.Pandem.Worm, W32.Pandem.B.Worm
Type: Worm
Infection Length: 112,640 bytes

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Systems Not Affected: Linux, Macintosh, OS/2, UNIX

Full info Here

woody · Sep 2, 2003

Not another new one!!

Thanks for the info Bro!

LTR12101B · Sep 2, 2003

Also not affected ... by any Microsoft email hole worms......
*** Correction *** - since this has several entry vectors (eg. Fileshare), the choice of email client is not a 100% solution - though it would seem that other entry points are TROJAN (con you into running it), rather than worm/virus.

Systems using a more secure mail client - such as Pegasus - www.pmail.com

Mozilla and Thunderbird should also be resistant.

http://mahogany.sourceforge.net/ - Mahogany Mail might also be resistant

Pegasus, though, makes an explicit point of being resistant to most email worms, and is very safe unless you start overriding the safety features - once you open a HTML email in the standard browser instead of the safe view, you're asking for it!

banzibaby · Sep 2, 2003

Cheers 4 the info RASTABT

So many of these damn things goin about the now

BaNzI

serjer · Sep 2, 2003

thx 4 news...hope i wont get busted with mozilla

sergio · Sep 3, 2003

Thanks for the info RASTABT

banzibaby · Sep 3, 2003

Systems Not Affected: Linux, Macintosh, OS/2, UNIX

Hmm why doesn't that suprise me:

BaNzI

VIPER_1069 · Sep 3, 2003

whoooooooooooot pegasus mail RULES lol

never have liked SUCKY OUTLOOK/EXPRESS lol not had a virus in email in aggggggggges .... couple of years prolly since ive used pegasus

LTR12101B · Sep 3, 2003

I'll Also throw in a good report for Outpost Firewall (not sure if this is a V2 only feature or not - I think it's in V1 free as well?)

Can neutralize email attachments (through pop3) - they aren't deleted, but are renamed to prevent then being executable by default - if wanted, they can be renamed - The Microsoft OE6 way just destroys them!