RE: Xmas virus on the cards ?

["Schmehl, Paul L" <pauls () utdallas edu>]

> -----Original Message-----
> From: full-disclosure-admin () lists netsys com 
> [mailto:full-disclosure-admin () lists netsys com] On Behalf Of 
> security squirrel
> Sent: Thursday, December 18, 2003 6:59 AM
> To: full-disclosure () lists netsys com
> Subject: [Full-disclosure] Xmas virus on the cards ?
>
> Hi all - 
>
> I noticed this article at http://www.vnunet.com/News/1151553 
> and it looks alarming - however did not find any more details. 

There has to be more to this than what the article reveals.  I renamed
an html file to .jpg and double clicked on it to launch it, and it
brought up Windows Picture and Fax Viewer, which printer an error
message "No preview available".  This is a default install of Windows XP
Professional with all patches.

I then right-clicked on the image while holding down the shift key,
selected Open With and chose Internet Explorer.  IE displayed a broken
image.  This is IE 6.0.2800.1106.xpsp2.030422-1633 (latest version with
all patches).

There must be more to this story than what has been published on
vnunet.com.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html