Full Disclosure mailing list archives

Fw: Joke.cpl ???

From: "Daniel Bachfeld" <dab () heise de>
Date: Fri, 29 Oct 2004 14:14:48 +0200

So far we have Bagle AQ, AT, AU, AY and BB for the same worm
More proposals?

This is the biggest divergence i've seen the last months. Is there any
reason, why the vendors could not agree on one name? We already have
CVE-entries and Bugtraq-IDs for vulnerabilities.

Why not build up a similar database, e.g. hosted at EICAR, where the vendors
will enter there finding and give it a name. First come, first served.

Daniel Bachfeld
heise Security


----- Original Message ----- 
From: "Daniel Bachfeld" <dab () heise de>
To: <Full-Disclosure () lists netsys com>
Sent: Friday, October 29, 2004 12:48 PM
Subject: Re: [Full-disclosure] Joke.cpl ???


Bagle.bb for nai http://vil.mcafeesecurity.com/vil/content/v_129509.htm

and Bagle.at for TM

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BAGLE.AT


dab
heisec

----- Original Message ----- 
From: "Daniel Bachfeld" <dab () heise de>
To: <Full-Disclosure () lists netsys com>
Sent: Friday, October 29, 2004 12:19 PM
Subject: Re: [Full-disclosure] Joke.cpl ???

It's a new Bagle-Version: Bagle.ay
it starts spreading a few hours ago.

Daniel Bachfeld
heise Security
.
----- Original Message ----- 
From: "altmann" <patrykgod () wp pl>
To: <Full-Disclosure () lists netsys com>
Sent: Friday, October 29, 2004 11:34 AM
Subject: [Full-disclosure] Joke.cpl ???

Hi,

I've five mails show up in my box just today all of them
have attachments with ".cpl" after the attachment name, i.e.

"Price.cpl",

"Joke.cpl" (below)

////////////////////////////////////////////////////////////////////////////

/////////////////////////////////////////////////////////////////////////

Note: This is an HTML message. For security reasons, only the raw HTML

code is

shown. If you trust the sender of this message then you can activate
formatted HTML display for this message by clicking here.


<html><body>
:))

<br>
</body></html>
Price.cpl

////////////////////////////////////////////////////////////////////////////

//////////////////////////////////////////////////////////////////////////


Do you know something more about this virus(?) ?
(Please don't write: search for it using Google)

P.
altmann

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

Joke.cpl ??? altmann (Oct 29)
- Re: Joke.cpl ??? Daniel Bachfeld (Oct 29)
  - Re: Joke.cpl ??? Daniel Bachfeld (Oct 29)
- Re: Joke.cpl ??? Raymond Dijkxhoorn (Oct 29)
  - Re[2]: Joke.cpl ??? Geza Papp dr (Axelero) (Oct 29)
- Re: Joke.cpl ??? Tom Meier (Oct 29)
- Re: Joke.cpl ??? Mihai Novitchi (Oct 29)
- <Possible follow-ups>
- Fw: Joke.cpl ??? Daniel Bachfeld (Oct 29)
  - Re: [SPAM] Fw: Joke.cpl ??? Hugo van der Kooij (Oct 29)
  - Re: Fw: Joke.cpl ??? Eduard Warkentin (Oct 29)
  - Re: Fw: Joke.cpl ??? Dave Horsfall (Oct 29)