Full Disclosure mailing list archives

Re: Backdoor, Virus, Dialer?


From: Valdis.Kletnieks () vt edu
Date: Wed, 27 Aug 2003 14:56:43 -0400

On Wed, 27 Aug 2003 18:39:11 +0200, Michael Renzmann <security () dylanic de>  said:
Hi.

Recently I received some mails in english language. The writer (who 
pretends being security () microsoft com, but the header says "Sender: 
admin () duma gov ru") generously sends a patch along with his mail which 
should be applied in order to fix a security bug... ha ha.

Most likely a known virus, W32/Dumaru-A.   If what you have there *doesnt*
match that one, give us another buzz....

Attachment: _bin
Description:


Current thread: