Arthur S. Alexion on Wed, 7 Nov 2001 21:50:17 +0100


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] My father was the smartest


This one has been around for a while. Can't remember the name, but I've gotten it at least 10 times. (never infected since all mail comes into a linux or Palm client.)

It goes into Outlook (of course) grabs an existing message, names itself after an existing attachment (to look authentic) but with a windows executable extension (bat, com or exe, hidden by default windows settings), and sends itself to a prior addressee. It often works because the message seems to be coming from someone you know, with an appropriate looking attachment.

I'll remember the name and pass it on.

art

Joseph B. Welsh wrote:


That's what I thought.

I checked at symantec anti-virus center and couldn't find any references
to this mail or it's attachment.

I'm going see if anybody seen this one before..

Joe


On Wed, 2001-11-07 at 11:03, Mike Leone wrote:
> What the heck is this?

Looks like a virus attachment from an infected Windows PC. It's a 69K ".bat"
file - sort of a Windows shell script, if you can believe the name.


> Is someone trying to spread a windows virus on a linux mailing list?

Inadvertantly, I'm sure.




______________________________________________________________________ Philadelphia Linux Users Group - http://www.phillylinux.org Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce General Discussion - http://lists.phillylinux.org/mail/listinfo/plug



______________________________________________________________________ Philadelphia Linux Users Group - http://www.phillylinux.org Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce General Discussion - http://lists.phillylinux.org/mail/listinfo/plug



____________________________________.
artAlexion
-------------
arthur@alexion.com
www.alexion.com

______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug