full-disclosure - new virus: (fwd)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Law11-OE35nMKzRezsK00001b7a@hotmail.com>
From: se_cur_ity at hotmail.com (morning_wood)
Subject: new virus: (fwd)

attatched virus spoofing microsoft network security update
file is .zip password is "infected"
email body follows....
--------------- snip -----------------
Microsoft Customer

this is the latest version of security update, the
"September 2003, Cumulative Patch" update which resolves
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express
as well as three newly discovered vulnerabilities.
Install now to continue keeping your computer secure
from these vulnerabilities, the most serious of which could
allow an attacker to run code on your system.
This update includes the functionality of all previously released patches.

System requirements: Windows 95/98/Me/2000/NT/XP
This update applies to:
 - MS Internet Explorer, version 4.01 and later
 - MS Outlook, version 8.00 and later
 - MS Outlook Express, version 4.01 and later

Recommendation: Customers should install the patch at the earliest
opportunity.
How to install: Run attached file. Choose Yes on displayed dialog box.
How to use: You don't need to do anything after installing this item.

Microsoft Product Support Services and Knowledge Base articles can be found
on the Microsoft Technical Support web site.
http://support.microsoft.com/

For security-related information about Microsoft products, please visit the
Microsoft Security Advisor web site
http://www.microsoft.com/security/

Thank you for using Microsoft products.

Please do not reply to this message.
It was sent from an unmonitored e-mail address and we are unable to respond
to any replies.

----------------------------------------------
The names of the actual companies and products mentioned herein are the
trademarks of their respective owners.
----------------------- snip ---------------------------

Donnie Werner
CTO e2-labs.com

"we do more cuz Pivx sucks"

----- Original Message -----
From: "Exibar" <exibar@...lair.com>
To: "Ron Clark" <ron@...mail.Armstrong.EDU>; <full-disclosure@...sys.com>
Sent: Friday, September 19, 2003 10:38 PM
Subject: Re: [Full-Disclosure] new virus: (fwd)

> it is the SWEN virus.  I've received dozens of them, McAfee picks it up as
> Swen,  have no reason to doubt it :-)
>
>  Exibar
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: q894829.zip
Type: application/x-zip-compressed
Size: 52604 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030920/209af729/q894829.bin