Outbreak Name: Troj Yabe.E
Outbreak Date: 12-01-05
IronPort's Virus Outbreak Filters Protect Customers from Yabe Outbreak Additional 12 Hours and 22 Minutes Protection
Background
IronPort's Virus Outbreak Filters protects customers within the critical period between the first exploit of a virus outbreak and the release of an AV signature. During the recent Yabe variant outbreak, Troj Yabe.E, Outbreak Filters users were protected 12 hours and 22 minutes before an AV signature was available from any of the major AV vendors*. Troj Yabe.E is a Trojan that usually arrives as an attachment to email messages spammed by a malicious user. It uses the file name T-COM-RECHNUNG.PDF.EXE. By using a double extension, users are led to believe that this Trojan is a non-malicious .PDF file.
Timeline
Outbreak Details & Timeline
| Date | December 1, 2005 |
| Name** | Troj Yabe.E |
| 07:06 GMT | Virus Threat Level raised and protection starts |
| 19:28 GMT - the next day | First anti-virus signature published* |
Benefits
12 hours and 22 minutes of additional protection with Virus Outbreak Filters
* Calculated as first publicly published signature from any of the following vendors: Sophos, Trend Micro, Computer Associates, Kaspersky Labs, Symantec or McAfee. If signature time is not available, first publicly published alert time is used.
** As named by Trend Micro
