[28535] in North American Network Operators' Group
uuencoded Love Worm variant
daemon@ATHENA.MIT.EDU (Eric Conrad)
Fri May 5 13:48:57 2000
Date: Fri, 5 May 2000 13:44:16 -0400 (EDT)
From: Eric Conrad <econrad@bu.edu>
To: nanog@merit.edu
Message-ID: <Pine.SOL.4.10.10005051330270.25795-100000@it>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
I caught one of these uuencoded 'in the wild'. It would have slipped
through my filters if not for the standard Subject: line.
---<snip>---
kindly check the attached LOVELETTER coming from me.
begin 666 LOVE-LETTER-FOR-YOU.TXT.vbs
---<snip>---
I've since updated my filters to catch uuencodes as well.
On a lighter note, a clueless gateway forwarded 6 copies of the worm with
the following helpful banner attached:
---<snip>---
kindly check the attached LOVELETTER coming from me.
**********************************************************************
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the system manager.
This footnote also confirms that this email message has been swept by the
latest virus scan software available for the presence of computer viruses.
**********************************************************************
------_=_NextPart_000_01BFB683.1FF56E54 Content-Type:
application/octet-stream;
name="LOVE-LETTER-FOR-YOU.TXT.vbs"
--<snip>---
...Eric
