Re: [SLUG] Distributed by Universal

From: Brian Coyle (brianc@magicnet.net)
Date: Thu Oct 25 2001 - 22:40:00 EDT


"R.G. Mayhue" wrote:
>
> On Thursday 25 October 2001 09:08 pm, you wrote:
> >
> > Cathy.com to follow her search for true love on the
> > Net.%|%Cathy%|%http://www.uexpress.com/ups/comics/ca/index.html%|%h

>
> Please explain........what is this all about?? Am I missing something
> here???
>

I think David's X-Mailer explains most of it:

        X-Mailer: Microsoft Outlook Express 4.72.3612.1700

  :)

Looks like a LookOut MM virus of some sort. I didn't find any obvious
signatures when I ran 'strings' against the Visit.com attachment.
Didn't see anything on the McAfee (nai) site either.

The COMICS.TXT attachment was simply ASCII text (containing URLs).

David- I would suggest you update your virus DAT files and scan
the entire machine immediately. I also suggest disconnecting from
the 'Net until the machine is proven clean. (apt-get could be useful ;)

GOOD LUCK!

-- 
Linux hank.mjudge.net 2.4.8-24mdk #1 Mon Sep 17 14:22:11 CEST 2001 i586 
10:30pm  up 5 days,  1:44,  0 users,  load average: 0.32, 0.12, 0.10



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 15:48:31 EDT