RE: New MSN worm?

["Hazel, Scott A." <Scott.Hazel () unisys com>]

I have seen the same with similar results for Google and the site itself.  Seems to be only coming over MSN messenger 
though.  

Scott Hazel 

-----Original Message-----
From: Magnus Törnekrona [mailto:magnus.tornekrona () cleric se] 
Sent: Tuesday, February 15, 2005 3:21 PM
To: incidents () securityfocus com
Subject: New MSN worm?

Just arrived home, had four persons on my MSN contact list who had sent me the following messages:
"LOOK! http://members.chello.nl/g.geurts1/handcuffs.pif " (with ':O'-smiley at the end.) "LMFAO! 
http://members.chello.nl/g.geurts1/handcuffs.pif " (with ':P'-smiley at the end.) "rofl! 
http://members.chello.nl/g.geurts1/handcuffs.pif " (with ':D'-smiley at the end.)

I tried to wget the file, but got a 404. chello.nl has probably already dealt with the problem, at least on their own 
servers, but you can never be sure...
Thus, I haven't been able to get the .pif and try to disassemble it or check the contents, and after a quick googling I 
haven't found anything that matches this new (?) virus/worm.

Anyone else knows about this and if there's any spyware remover / antivirus that fixes the problem?

Regards,
Magnus Törnekrona

Attachment: smime.p7s
Description: