Security Incidents mailing list archives

Re: Romeo&Juliet (fwd)


From: Brad <gryphonn () austarnet com au>
Date: Sat, 18 Nov 2000 08:43:43 +1000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You received Iworm.blebla or the verona worm. You are also infected
with it as it was caught by AVP and Pegasus mail has done its usual
munge of the attachment.
Best head to your favourite anti-virus site and find some removal
instructions. I'll post some as soon as I clean my system.

Cheers,
Brad

In reply to:
Sender: Micha  'CeFeK' Nazarewicz <Michal.Nazarewicz () SayDK Co UK>
Subject: Romeo&Juliet (fwd)
Dated: 16 Nov 2000,
Time: 23:57

Hi List,
 I've just received strange e-mail from the person living in my
country, but one i've never written to. It looks very, very suspicious:
message body looks corrupted (pine says it's encoded in qp, but contains
non-hexadecimal characters). There are two attachments: one is of
APPLICATION/X-MSWORD type, but it's extension is .EXE. The second one is
of .CHM extension, I haven't looked at it yet.
 The subject of this e-mail os Romeo&Juliet... so this looks like
just one another funny e-mail from someone you should know.
 If anyone is interested, I can email him these attachments. I'm
very curious, what's this.

Regards,
--
Michal 'CeFeK' Nazarewicz   / CAOL, DK GROUP SYSADMIN ^ NETADMIN
B ICQ 47171266 / +48 (601) CEFEK 0 / http://www.dkgroup.pl/index.html
  O mailto:cefek at saydk dot co dot uk / MN4735-RIPE / Pengiun #164007
    F Linux kanton 2.4.0-test7 #9 sob wrz 2 12:46:51 CEST 2000 i686
slackware7 H





-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2 -- QDPGP 2.61a
Comment: http://community.wow.net/grt/qdpgp.html

iQA/AwUBOhUn/wp4btZbl/PZEQJVhgCgzyM5gKgQJ0Jr3lUr6zn3EZQSVVAAn1x4
+VHWEipABq0nC6jdAUZby8rZ
=nJCR
-----END PGP SIGNATURE-----


Current thread: