I suppose this is another new virus

Date view Thread view Subject view Author view

From: Pete Goodeve (pete@jwgibbs.cchem.berkeley.edu)
Date: Tue Oct 30 2001 - 10:35:43 PST

(or just a variant on an old one?)

I got a couple of copies of this today. Don't know if it's novel...

The subject was "desktopdesktopdesktopdesktop...."

It had an initial HTML segment, containing only the following (HTML header
removed):

        <iframe src=cid:EA4DMGBP9p height=0 width=0>
        </iframe>

This was followed by a base64 attachment, labelled as:

        Content-Type: audio/x-wav;
                name="sample.exe"
        Content-Transfer-Encoding: base64

Its contents actually appear to *be* a DOS/Windows executable

I have kept a copy of the complete original if anybody needs it.

                                        -- Pete --

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, its meetings and events, and its
mailing list, including information on subscribing and unsubscribing,
see the Micronet Web site at <http://wss.berkeley.edu/micronet/>.

Date view Thread view Subject view Author view

This archive was generated by hypermail 2b29 : Tue Oct 30 2001 - 10:42:16 PST