full-disclosure - Xmas virus on the cards ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: pauls at utdallas.edu (Schmehl, Paul L)
Subject: Xmas virus on the cards ?

> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com 
> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of 
> security squirrel
> Sent: Thursday, December 18, 2003 6:59 AM
> To: full-disclosure@...ts.netsys.com
> Subject: [Full-Disclosure] Xmas virus on the cards ?
> 
> Hi all - 
> 
> I noticed this article at http://www.vnunet.com/News/1151553 
> and it looks alarming - however did not find any more details. 

There has to be more to this than what the article reveals.  I renamed
an html file to .jpg and double clicked on it to launch it, and it
brought up Windows Picture and Fax Viewer, which printer an error
message "No preview available".  This is a default install of Windows XP
Professional with all patches.

I then right-clicked on the image while holding down the shift key,
selected Open With and chose Internet Explorer.  IE displayed a broken
image.  This is IE 6.0.2800.1106.xpsp2.030422-1633 (latest version with
all patches).

There must be more to this story than what has been published on
vnunet.com.

Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/