[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20070413030054.GB29672@c3.seiden.com>
Date: Thu, 12 Apr 2007 20:00:54 -0700
From: mis@...den.com
To: Matti Ranta <mdranta@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: patch-9449
see
http://www.symantec.com/outbreak/spam-attack-zipped-trojan.html
On Thu, Apr 12, 2007 at 08:13:35PM -0500, Matti Ranta wrote:
> can you send it so we can dissect it?
>
> thank you
>
> On 4/12/07, Steward Smith <fulldisc@...ll.org> wrote:
> > Hi,
> >
> > Had a funny spam today that warned about mails coming from my IP address
> > and I should apply the attached patch. The filename was named
> > patch-9449.exe which was attached in a password protected zip file -
> > presumably to fool your virus scanner.
> >
> > I unpacked it but my up-to-date virus scanner on my Windows XP vmware
> > instance cannot detect any malware.
> >
> > Has anyone else seen this and know what it is?
> >
> > Stew
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
>
>
> --
> Matti Ranta
>
> This e-mail and any attachments may contain confidential and privileged
> information. If you are not the intended recipient, please notify the
> sender immediately by return e-mail, delete this e-mail and destroy any
> copies. Any dissemination or use of this information by a person other
> than the intended recipient is unauthorized and may be illegal.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists