Skip to main content
Gerry | Vanagon
Checking account...
← vanagon.com home · Continue the discussion in the forum
VanagonEuroVan
Subject:Re: VIRUS?!?!
From:JD Foster
Date:Tue, 19 Aug 2003 13:45:49 -0700

I've been emailing back & forth with John Rogers about this thing today.

It appears that someone (or someones) on the list has contracted this
bugger:
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.mankx@mm.html

It scans the victim's computer for e-mail address in a number of places, and
then sends infected messages to the found addresses with any of the
following subjects:

Your details
Approved (Ref: 38446-263)
Re: Approved (Ref: 3394-65467)
Your password
Re: My details
Screensaver
Cool screensaver
Re: Movie
Re: My application

Heads up folks!  I'm suprised none have been pushed through the whole list
quite frankly, does the list server have an anti-virus scanner?

Cheers,
JD

----- Original Message -----
From: "Jeffrey Schwaia" <jeff@TSSGI.COM>
To: <vanagon@GERRY.VANAGON.COM>
Sent: Tuesday, August 19, 2003 1:28 PM
Subject: VIRUS?!?!

> I've received about a dozen emails from list members.  Most have the
subject
> line of "Your Details" and have a pif file attachment.  Of course I
deleted
> all of them, but I just wanted to give everyone a heads up about the evil
> lurking.
>
> I even got one from Stan... but his had "Your Application" in the subject
> line.
>
> Cheers,
>
> Jeff
>

Have something to add on this topic today? Revive this thread in the forum »