Hi, for the whom it may concern: another email worm is moving around. The name is: W32/Myparty@MM Same like everytime. Seems to be some more dangerous for the drive c:\ cause it adds a format c: /y to the autoexec.bat. More infos: http://vil.nai.com/vil/content/v_99332.htm have a nice day ;) -- intraDAT AG http://www.intradat.com Wilhelm-Leuschner-Strasse 7 Tel: +49 69-25629-0 D - 60329 Frankfurt am Main Fax: +49 69-25629-256 Junk mail is war. RFCs do not apply.
Sven Michels wrote:
Same like everytime. Seems to be some more dangerous for the drive c:\ cause it adds a format c: /y to the autoexec.bat.
So - please: were did you get that info from?!? I can't find anything about "format c: /y" on McAfee's page - and it - for sure - does NOT add such an entry as we checked on an isolated system... Greetz Christoph -- .-. Ruhr-Universitaet Bochum /v\ L I N U X Lehrstuhl fuer Biophysik // \\ >Penguin Computing< c/o Christoph Wegener /( )\ Gebaeude ND 04/Nord ^^-^^ D-44780 Bochum, GERMANY Tel: +49 (234) 32-25754 Fax: +49 (234) 32-14626 mailto:cwe@bph.ruhr-uni-bochum.de http://www.bph.ruhr-uni-bochum.de
Christoph Wegener wrote:
Sven Michels wrote:
Same like everytime. Seems to be some more dangerous for the drive c:\ cause it adds a format c: /y to the autoexec.bat.
So - please: were did you get that info from?!? I can't find anything about "format c: /y" on McAfee's page - and it - for sure - does NOT add such an entry as we checked on an isolated system...
ok, you're right, was another (new?) virus, sorry for that. here is the complete virus: Subject: new photos from my party! Hello! My party... It was absolutely amazing! I have attached my web page with new photos! If you can please make color prints of my photos. Thanks!
begin 666 www.myparty.yahoo.com M35J0``,````$````__\``+@`````````0``````````````````````````` M````````````````````@`````X?N@X`M`G-(;@!3,TA5&AI<R!P<F]G<F%M M(&-A;FYO="!B92!R=6X@:6X@1$]3(&UO9&4N#0T*)`````````!010``3`$# M`)(B4CP``````````.``#P$+`04``'`````0````T```X$P!``#@````4`$`
(the > is added so that no client will interpret that as attachment :) -- intraDAT AG http://www.intradat.com Wilhelm-Leuschner-Strasse 7 Tel: +49 69-25629-0 D - 60329 Frankfurt am Main Fax: +49 69-25629-256 Junk mail is war. RFCs do not apply.
participants (2)
-
Christoph Wegener -
Sven Michels