full-disclosure - new virus:

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <03b201c37eca$d904a640$c400a8c0@MLANDE>
From: mlande at bellsouth.net (Mary Landesman)
Subject: new virus:

It sounds like it might be the new Swen worm. According to Symantec:

The worm can also impersonate mail delivery failure notices, attaching
itself as a randomly named executable.

One example is:

I'm sorry I wasn't able to deliver your message to one or more destinations.

http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html

Regards,
Mary Landesman
Antivirus About.com Guide
http://antivirus.about.com

----- Original Message ----- 
From: "Ron Clark" <ron@...mail.Armstrong.EDU>
To: <full-disclosure@...sys.com>
Sent: Friday, September 19, 2003 10:38 AM
Subject: [Full-Disclosure] new virus:

Has anyone seen an email going around with subject bug message
containing a supposed audio attachment that is really an exe named
ckcwr.exe.

Is this a possible new virus? I have recieved numerous cpoies of this
email since last night.

Ron Clark
System Administrator
Armstrong Atlantic State University

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html