Full Disclosure mailing list archives
Re: [ok] Possible Virus/Trojan
From: Andrew Farmer <andfarm () teknovis com>
Date: Sun, 25 Jul 2004 16:05:53 -0700
On 25 Jul 2004, at 12:06, Curt Purdy wrote:
Todd Towles wrote:I received an e-mail today that looked very much like a virus. Here is the messageAttachment - erupts.avi.exeSubject - New Southern California wildfire erupts<snip>Either this is a new Trojan that changes it body and subject based on the current AP news or someone used a very lame trick against me. =)I'm guessing the latter. Although story scraping would be possible,intellegent naming of the .exe would not be. Most likely a friend... orenemy.
Sure it would be. In this case, at least, the executable is just named based on the last word of the headline plus ".avi.exe".
Attachment:
PGP.sig
Description: This is a digitally signed message part
Current thread:
- RE: [ok] Possible Virus/Trojan, (continued)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 25)
- RE: [ok] Possible Virus/Trojan Edward Ray (Jul 26)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 26)
- Re: [ok] Possible Virus/Trojan Denis McMahon (Jul 27)
- SV: [ok] Possible Virus/Trojan Peter Kruse (Jul 27)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 27)
- Re: [ok] Possible Virus/Trojan Duncan Hill (Jul 27)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 27)
- RE: [ok] Possible Virus/Trojan Mortis (Jul 27)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 27)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 25)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 26)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 26)
- Re: [ok] Possible Virus/Trojan Charles Heselton (Jul 26)
- RE: [ok] Possible Virus/Trojan Todd Towles (Jul 26)