Anybody have an email address for NAV or Symantic?

[Bovon]

I got a strange file today, that was suspicious, and I went to Symantic to find out something about it.

The name of the file is: JIMI_HMNDRIX.MP3.zlo

The double extension on the file raised the red flag for me. The file came from someone I know.

After a couple of hours at Symantic trying to track anything with these extensions, or full file name, and came up with zilch...I ran NAV on it 3 times (NAV checks all email before downloading anyway) and on the 3rd attempt, NAV detected it as W95.MTX.dr.

I tried following every link at Symantic's website to locate some kind of email address to advise them of this new file name containing this virus...no luck.

If anybody has discovered a way to contact NAV or Symantic, please let me know..

Thanks.

[Xeroid]

Try here:
http://www.symantec.com/avcenter/submit.html

"Send Suspected Threats for Review"

Just choose the PC platform or the Macintosh platform link.

Mike

[Steve R Jones]

Thats the SIRCAM Virus.

W32.Sircam.Worm@mm (http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html)

Not only have I received three of these little gems today, I've seen MANY people on BBS's reporting the same thing.

Spanish Version:
First line: Hola como estas ?
Last line: Nos vemos pronto, gracias.

English Version:
First line: Hi! How are you?
Last line: See you later. Thanks

Between these two sentences, some of the following text may appear:

Spanish Version:
Te mando este archivo para que me des tu punto de vista
Espero me puedas ayudar con el archivo que te mando
Espero te guste este archivo que te mando
Este es el archivo con la informaci=n que me pediste

English Version:
I send you this file in order to have your advice
I hope you can help me with this file that I send
I hope you like the file that I sendo you
This is the file with the information that you ask for

[Bovon]

Hi Steve, this one is different (?) I have recieved several files with those questions, ect that you mention and was aware of those, but this one appears to be different. Symantic did not indicate that W95.MTX was the same as the one you mentioned.

I did try the route you mentioned Xeroid. I went from page to page...always another link to follow. After at least 10 pages, I gave up. I would simply email them to advise that one of the known virii is now going around under a new file name, but I'll just be danged if I am gonna search their site for hours on end for a way to email them.

Still looking for an email address for Symantic or NAV

[Steve R Jones]

Worldwide Corporate Directory (http://www.symantec.com/corporate/corpdir.html)

And on the link in the first post I did there is: Submit Virus Samples
Send Suspected Threats for Review

and there is also a Feedback link..

Oh and ps, I've gotten several of the .zlo extensions this week. It comes with a Zone Alarm Icon.



[This message has been edited by Steve R Jones (edited 07-26-2001).]

[Bovon]

Thanks Steve...I was wondering why the Zone Alarm Icon was showing up with this file