oletrucks
[Top] [All Lists]

RE: [oletrucks] I didn't send that screensaver thing

To: <lglenn11@mchsi.com>, <Karen.Duff@ctbrad.ang.af.mil>
Subject: RE: [oletrucks] I didn't send that screensaver thing
From: "Hanlon, Bill (ISS Houston)" <bill.hanlon@hp.com>
Date: Wed, 20 Aug 2003 14:28:42 -0500
Good thing about the oletruck e-mail list is that Miq doesn't allow any 
attachments (THANKS MIQ!!!) effectively eliminating any propagation of such 
worms, viri, etc. through this list. 

-----Original Message-----
From: lglenn11@mchsi.com [mailto:lglenn11@mchsi.com]
Sent: Wednesday, August 20, 2003 1:22 PM
To: Karen.Duff@ctbrad.ang.af.mil
Cc: BLUCHEETAH@aol.com; oletrucks@autox.team.net
Subject: Re: [oletrucks] I didn't send that screensaver thing


Hi, Karen.

As Susan mentioned, it appears you have the W32.Sobig.F2mm worm.  W32.Sobig.F2mm
is a mass-mailing, network-aware worm that sends itself to all the email
addresses that it finds in the files with the following extensions:
.dbx
.eml
.hlp
.htm
.html
.mht
.wab
.txt 
The e-mail message has the following characteristics:

From: Spoofed address (which means that the sender in the "From" field is most
likely not the real sender).
The worm may use the address admin@internet.com as the sender.

Subject:
Re: Details
Re: Approved
Re: Re: My details
Re: Thank you!
Re: That movie
Re: Wicked screensaver
Re: Your application
Thank You!
Your details

Body:
See the attached file for details
Please see the attached file for details.

Attachment:
your_document.pif
document_all.pif
thank_you.pif
your_details.pif
document_9446.pif
application.pif
wicket_scr.scr
movid0045.pif
 

Note: The worm deactivates on Sept. 10, 2003. The last day on which the worm
will spread is September 9, 2003. 

> In a message dated 8/20/2003 8:40:43 AM Central Standard Time, 
> steve@OldSub.com writes:
> 
> 
> > Subj:Re: [oletrucks] I didn't send that screensaver thing 
> > Date:8/20/2003 8:40:43 AM Central Standard Time
> > From:<A HREF="mailto:steve@OldSub.com";>steve@OldSub.com</A>
> > To:<A 
> HREF="mailto:Karen.Duff@ctbrad.ang.af.mil";>Karen.Duff@ctbrad.ang.af.mil</A>, 
><A 
> HREF="mailto:oletrucks@autox.team.net";>oletrucks@autox.team.net</A>
> > Sent from the Internet 
> > 
> > 
> > 
> > Most likely you got one of those virus that send messages to everyone you
> > know.
> 
> I believe it's the W32/Sobig.f@MM virus that mails itself as the screensaver 
> message. Karen, you might want to go ahead and get a virus sweep and 
> protection on your PC.
> Susan
oletrucks is devoted to Chevy and GM trucks built between 1941 and 1959
oletrucks is devoted to Chevy and GM trucks built between 1941 and 1959

<Prev in Thread] Current Thread [Next in Thread>