[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <fc0d08b70704130022v1b43ec2bh98f2fd1c9320f596@mail.gmail.com>
Date: Fri, 13 Apr 2007 15:22:35 +0800
From: "Wong Chee Chun" <cheechun2005@...il.com>
To: "Steward Smith" <fulldisc@...ll.org>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: patch-9449
Dshied's recent diary entry might has something related about this virus i
guess. except that the filename is patch-58214.zip.
Here is the link to the diary -->
http://www.dshield.org/diary.html?storyid=2618&dshield=0fcfb711fed834995b1d52da5f438c11
cheers
On 4/13/07, Steward Smith <fulldisc@...ll.org> wrote:
>
> Hi,
>
> Had a funny spam today that warned about mails coming from my IP address
> and I should apply the attached patch. The filename was named
> patch-9449.exe which was attached in a password protected zip file -
> presumably to fool your virus scanner.
>
> I unpacked it but my up-to-date virus scanner on my Windows XP vmware
> instance cannot detect any malware.
>
> Has anyone else seen this and know what it is?
>
> Stew
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
--
Wong Chee Chun
SSA Network Sdn Bhd
509, 5th Flr, Lift Lobby 3, Blk A
Damansara Intan 1 Jalan SS 20/27
Petaling Jaya, Selangor
West Malaysia
Content of type "text/html" skipped
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists