Full Disclosure mailing list archives

Anyone else seeing MyWork.zip - Modified Wdialupd virus?


From: "Risser, Nathan \(BLM\)" <nathan.risser () express-scripts com>
Date: Wed, 3 Dec 2003 14:07:21 -0600

I'm just curious if anyone else is seeing this activity:

My Antigen (flame suit donned, but will not participate in a battle)
setup has trapped a few messages that contain MyWork.zip attachment.  It
gets trapped the same way that MyMovie.zip is trapped and looks like the
author has changed/added another variant of what F-Secure has named
"Wdialupd" 
<http://www.europe.f-secure.com/v-descs/wdialupd.shtml>.

Each of the messages I've received have the same subject "Sorry i am
late...".

Nate
******* Confidentiality Notice *******
This email, its electronic document attachments, and the contents of its website linkages may contain confidential 
health information.  This information is intended solely for use by the individual or entity to whom it is addressed.  
If you have received this information in error, please notify the sender immediately and arrange for the prompt 
destruction of the material and any accompanying attachments.

******* Avis de confidentialite *******
Ce courriel ainsi que tout document y etant joint de meme que le contenu des liens vers des sites Web peuvent reunir 
des renseignements  confidentiels sur la sante.  Cette information s'adresse uniquement a l'usager ou a l'organisation 
auxquels elle est destinee.  Si vous avez recu ce message par erreur, veuillez en aviser l'expediteur immediatement et 
proceder a la suppression du document et des fichiers joints sans tarder. 



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: