
Virus alert - I just got 3 mails w/ this, norton caught it
addresses, purporting to have been sent by Microsoft
following extensions:
a.. .wab
b.. .dbx
c.. .htm
d.. .html
e.. .eml
f.. .txt
Email Routine Details
The email message has the following characteristics:
Subject: The subject line will be one of the following:
a.. Your details
b.. Approved (Ref: 38446-263)
c.. Re: Approved (Ref: 3394-65467)
d.. Your password
e.. Re: My details
f.. Screensaver
g.. Cool screensaver
h.. Re: Movie
i.. Re: My application
Message Body: All information is in the attached file.
Attachment: The attachment name will be one of the following:
a.. your_details.pif
b.. ref-394755.pif
c.. approved.pif
d.. password.pif
e.. doc_details.pif
f.. screen_temp.pif
g.. screen_doc.pif
h.. movie28.pif
i.. application.pif
Refer to the Technical Details section of this writeup for the
characteristics of the email message.
NOTES:
a.. The worm de-activates on May 31, 2003, and therefore, the last day on
which the worm will spread is May 30, 2003.
b.. Virus definitions dated prior to May 19, 2003 may detect this threat
--
Kevin B. Erskine, Owner
http://www.*-*-*.com/
415-331-6003 (Pacific Standard Time)
Beautiful Sausalito, California, USA
"Begin a new era of productivity..."
---
Using RADIS everyday and everywhere!