full-disclosure - HEADS UP VIRUS BEING SPREAD one of our readers infected?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <004801c32251$e3ec85d0$0b01a8c0@fujilatop>
From: steve at entrenchtech.com (Steve Manzuik)
Subject: HEADS UP VIRUS BEING SPREAD one of our readers infected?

No but not reading or comprehending a post should be.  If you took a second
to breath and use your brain instead of freaking out over the apparent
"virus" you would have noticed that the subject line of the message your oh
so great filter rejected had the words "VIRUS ATTACHED" to it.  I am
grateful for the poster for sharing the virus -- its fun to rip these things
apart yourself and compare results.

This list isn't moderated so expect this kind of stuff to be posted.  Funny,
when you go to your company web site you have the following words in your
marketing blurb;

"Does your SECURITY SOLUTION Continue To Cry Wolf?  We stop real attacks
...for you."

Ironic isn't it.  

> Message: 2
> Date: Sat, 24 May 2003 14:51:41 -0400
> From: <scheidell@...nap.net>
> To: <full-disclosure@...ts.netsys.com>
> Subject: [Full-Disclosure] HEADS UP VIRUS BEING SPREAD one of 
> our readers infected?
> 
> so, should being infected with a virus, or attempting to 
> infect others be grounds for automatic unsubscribing?
> 
> did a google for update880.exe, found nothing yet.
> 
> TZ eastern.
> 
> May 24 14:46:15 Solaris postfix/cleanup[1398]: [ID 197553 
> mail.info] DB90F38111: reject: header Content-Type: 
> application/x-msdownload;??name="Update880.exe" from 
> NETSYS.COM[199.201.233.10]; 
> from=<full-disclosure-admin@...ts.netsys.com> 
> to=<scheidell@...nap.net> proto=ESMTP helo=<netsys.com>: 550 
> 5.7.2 Possible Virus attachment. email rejected
> 
> 
> -- 
> Michael  S. Scheidell, CEO
> SECNAP Network Security www.secnap.com
> scheidell@...nap.net  / 1+561.368.9561, 1131
> Sales: 866-SECNAPNET / 866.732.6276
>