Date:         Tue, 19 Aug 2003 13:45:49 -0700
Reply-To:     JD Foster <jidd@JIDDWARE.COM>
Sender:       Vanagon Mailing List <vanagon@gerry.vanagon.com>
From:         JD Foster <jidd@JIDDWARE.COM>
Subject:      Re: VIRUS?!?!
Comments: To: Jeffrey Schwaia <jeff@TSSGI.COM>
Content-Type: text/plain; charset="iso-8859-1"

I've been emailing back & forth with John Rogers about this thing today.

It appears that someone (or someones) on the list has contracted this
bugger:
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.mankx@mm.html

It scans the victim's computer for e-mail address in a number of places, and
then sends infected messages to the found addresses with any of the
following subjects:

Your details
Approved (Ref: 38446-263)
Re: Approved (Ref: 3394-65467)
Your password
Re: My details
Screensaver
Cool screensaver
Re: Movie
Re: My application

Heads up folks!  I'm suprised none have been pushed through the whole list
quite frankly, does the list server have an anti-virus scanner?

Cheers,
JD


----- Original Message -----
From: "Jeffrey Schwaia" <jeff@TSSGI.COM>
To: <vanagon@GERRY.VANAGON.COM>
Sent: Tuesday, August 19, 2003 1:28 PM
Subject: VIRUS?!?!


> I've received about a dozen emails from list members.  Most have the
subject
> line of "Your Details" and have a pif file attachment.  Of course I
deleted
> all of them, but I just wanted to give everyone a heads up about the evil
> lurking.
>
> I even got one from Stan... but his had "Your Application" in the subject
> line.
>
> Cheers,
>
> Jeff
>