RE: MALWARE HOAX FW: Microsoft Security Bulletin MS01-039

["Kuo, Jimmy" <Jimmy_Kuo () nai com>]

> editor () infoguerra com br thought he was helping by writing:
>
> Microsoft has released a warning about this bogus bulletin. You can find it
> at http://www.microsoft.com/technet/itsolutions/security/news/bogus.asp

> The message with de bogus bulletin carries a variant of the Leave worm, as
> described by Symantec at
> http://www.symantec.com/avcenter/venc/data/w32.leave.b.worm.html

But that's a different Leave variant, the previous attack.  Today's issue is
Leave.F or .G, depending on who you talk to.

(Note Symantec's description is dated July 10 for something discovered on
July 9 for a 76800 size file.)

The current attack is with a 67844 size file.

Jimmy