Re: Suspect e-mail from bfrazzonat_private

From: Ryan Russell (ryanat_private)
Date: Tue May 08 2001 - 14:35:30 PDT

  • Next message: Ryan Russell: "sadmind/IIS Worm" 

    Further thoughts on this.  I've have several sample emails from the virus
described at:
http://vil.mcafee.com/dispVirus.asp?virus_k=99040&

They are all using this:
Content-Type: application/octet-stream;
For the .exe attachment type, not the gif type described by Yotam.  That,
and the fact that the .exe attached is not recognized by McAfee (which
does obviously recognize the virus they describe on their site) makes me
think this is a new variant.

					Ryan

    This archive was generated by hypermail 2b30 : Tue May 08 2001 - 14:50:10 PDT