[prev in list] [next in list] [prev in thread] [next in thread] 

List:       intrusions
Subject:    Re: Oh man you are kidding...
From:       Joe Matusiewicz <joem () nist ! gov>
Date:       2002-06-05 12:03:27
[Download RAW message or body]


I've gotten this same email on May 23rd but we strip out .scr attachments 
at our perimeter.  I figured it was some kind of booby trap for security 
challenged email users. It allegedly came from rosangela@sid.com.br and I 
emailed her back and never got a reply.


-- Joe


At 04:21 PM 6/4/02, Matthew Carpenter wrote:

>Praetor just snagged this email (it was sent to a DL that is not managed 
>by any one person or another):
>
>
>
>"Klez.E is the most common world-wide spreading worm.It's very dangerous 
>by corrupting your files.<br>
>
>Because of its very smart stealth and anti-anti-virus technic,most common 
>AV software can't detect or clean it.<br>
>
>We developed this free immunity tool to defeat the malicious virus.<br>
>
>You only need to run this tool once,and then Klez will never come into 
>your PC.<br>
>
>NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV 
>monitor maybe cry when you run it.<br>
>
>If so,Ignore the warning,and select 'continue'  If you have any 
>question,please"
>
>
>
>It had an attachment called type.scr.
>
>
>
>Has anyone seen this? Surely this is just another variation, trying to 
>fool the innocent and stupid.
>
>


[prev in list] [next in list] [prev in thread] [next in thread]