Re: 543.rar attachment

[Andrew Pretzl <arp () norlight com>]

The dddd.exe file is some manner of malware (spyware I believe). The
543.rar is probably some random name chosen to try to disguise the dddd.exe
payload.
AP
-
=============================
Andrew Pretzl - CISSP
Security Administrator
Norlight Telecommunications
http://www.norlight.com
=============================
"Quis custodiet ipsos custodes?"


                                                                                                                        
               
                      "Ju Ne"                                                                                           
               
                      <ddjjembe1@hotmai        To:       security-basics () securityfocus com                           
                  
                      l.com>                   cc:       (bcc: Andrew Pretzl/Brookfield/Norlight)                       
               
                                               Fax to:                                                                  
               
                      03/04/2005 11:12         Subject:  543.rar attachment                                             
               
                      AM                                                                                                
               
                                                                                                                        
               
                                                                                                                        
               




We have been receiving an influx of emails that contained an attachment
called 543.rar.  Inside this .rar is an executable called dddd.exe.  Does
anyone know more information about this executable?

june

_________________________________________________________________
Don’t just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/