RE: Fw: Lesbian Mpeg

[Mark.Schutzmann () Omron com]

It looks something like Netsky.x or w32.blackmal () mm html  I would suspect
(without being able to view the original MTA headers) that they are spoofed
from someone else? Or maybe Jason's machine was trojaned and sent his
mailing list out or is using his mailing list in its SMTP engine? I don't
think an AV scanner would detect these messages, as they are all text (or
did my AV scanner strip something out?).



                                                                                                                        
                          
                      "Harper, Patrick"                                                                                 
                          
                      <patrick.harper () phns com>           To:       <snort-users () lists sourceforge net>           
                                
                      Sent by:                            cc:                                                           
                          
                      snort-users-admin () lists sour        Subject:  RE: [Snort-users] Fw: Lesbian Mpeg               
                             
                      ceforge.net                                                                                       
                          
                                                                                                                        
                          
                                                                                                                        
                          
                      04/14/2004 10:15 AM                                                                               
                          
                                                                                                                        
                          
                                                                                                                        
                          




Has anyone identified what these are?  My AV is not picking it up, but I
know they can't be good




Patrick S. Harper | CISSP RHCT MCSE
Information Security Engineer
patrick.harper () phns com




From: jhaar [mailto:jhaar () trimble co nz]
Sent: Tuesday, April 13, 2004 6:46 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Fw: Lesbian Mpeg

movie attached open by media Player 7.1



Trimble.co.nz servers automatically scanned for viruses using McAfee
SECURITY




Disclaimer:
This electronic message, including any attachments, is confidential and
intended solely for use of the intended recipient(s). This message may
contain information that is privileged or otherwise protected from
disclosure by applicable law. Any unauthorized disclosure, dissemination,
use or reproduction is strictly prohibited. If you have received this
message in error, please delete it and notify the sender immediately.








-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users