Full Disclosure mailing list archives

irc.trojan.fgt - new variant.


From: "Tom Russell" <kalleth () nildram co uk>
Date: Wed, 5 Nov 2003 20:46:58 -0000

Once again, another variant of irc.trojan.fgt is about.
This one masquerades as a web page - jokes.html, and makes the unfortunate recipient say the following:

<victim> http:// home.amis .net/krsve9/Pari/jokes.html lol :D

(spaces added to URL to prevent accidental infection).

The virus files are at the following location: http://kalleth.2tone-dev.com/fd/jokes-html.zip - DO NOT RUN THE 
EXECUTABLE AS IT IS THE VIRUS. DO NOT OPEN THE HTML PAGE IN INTERNET EXPLORER AS IT IS A VIRUS.
</disclaimer>

End of message.

Current thread: