I've been emailing back & forth with John Rogers about this thing today. It appears that someone (or someones) on the list has contracted this bugger: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.mankx@mm.html It scans the victim's computer for e-mail address in a number of places, and then sends infected messages to the found addresses with any of the following subjects: Your details Approved (Ref: 38446-263) Re: Approved (Ref: 3394-65467) Your password Re: My details Screensaver Cool screensaver Re: Movie Re: My application Heads up folks! I'm suprised none have been pushed through the whole list quite frankly, does the list server have an anti-virus scanner? Cheers, JD
----- Original Message ----- From: "Jeffrey Schwaia" <jeff@TSSGI.COM> To: <vanagon@GERRY.VANAGON.COM> Sent: Tuesday, August 19, 2003 1:28 PM Subject: VIRUS?!?!
> I've received about a dozen emails from list members. Most have the subject > line of "Your Details" and have a pif file attachment. Of course I deleted > all of them, but I just wanted to give everyone a heads up about the evil > lurking. > > I even got one from Stan... but his had "Your Application" in the subject > line. > > Cheers, > > Jeff > |
Please note - During the past 17 years of operation, several gigabytes of
Vanagon mail messages have been archived. Searching the entire collection
will take up to five minutes to complete. Please be patient!
Return to the archives @ gerry.vanagon.com
The vanagon mailing list archives are copyright (c) 1994-2011, and may not be reproduced without the express written permission of the list administrators. Posting messages to this mailing list grants a license to the mailing list administrators to reproduce the message in a compilation, either printed or electronic. All compilations will be not-for-profit, with any excess proceeds going to the Vanagon mailing list.
Any profits from list compilations go exclusively towards the management and operation of the Vanagon mailing list and vanagon mailing list web site.