[48800] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Viri capture...

daemon@ATHENA.MIT.EDU (blitz)
Tue Jun 18 03:17:47 2002

Date: Tue, 18 Jun 2002 03:17:07 -0400
To: nanog@trapdoor.merit.edu
From: blitz <blitz@macronet.net>
In-Reply-To: <20020618034556.54382.qmail@web21109.mail.yahoo.com>
Errors-To: owner-nanog-outgoing@merit.edu


--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
	boundary="=====================_126062460==_.ALT"

--=====================_126062460==_.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed

Anti-viri worked here as well....file captured, and destroyed... backdoor 
bot indeed...


At 20:45 6/17/02 -0700, you wrote:

>I send you this file for your advice.

A more incriminating leader, you couldn't of picked...
Its nice when things actually WORK right....
What a waste of all our time....like no one here knows about anti-viri 
protection....like rolling a glazed doughnut into a police station...heh..




>Do You Yahoo!?
><http://rd.yahoo.com/welcome/*http://fifaworldcup.yahoo.com/fc/en/spl>Sign-up 
>for Video Highlights of 2002 FIFA World Cup 
>--0-340633384-1024371956=:50295 Content-Type: text/plain; 
>name="InterScan_SafeStamp.txt" Content-Transfer-Encoding: 7bit 
>Content-Disposition: attachment; filename="InterScan_SafeStamp.txt" ****** 
>Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached 
>file cisco_configmaker.exe contains: BKDR_SLACKBOT.C virus Attempted to 
>clean the file but it is not cleanable. It has been deleted. 
>***************** End of message *************** 
>--0-340633384-1024371956=:50295--

--=====================_126062460==_.ALT
Content-Type: text/html; charset="us-ascii"

<html>
Anti-viri worked here as well....file captured, and destroyed... backdoor
bot indeed...<br><br>
<br>
At 20:45 6/17/02 -0700, you wrote:<br><br>
<blockquote type=cite class=cite cite>I send you this file for your
advice.</blockquote><br>
A more incriminating leader, you couldn't of picked...<br>
Its nice when things actually WORK right....<br>
What a waste of all our time....like no one here knows about anti-viri
protection....like rolling a glazed doughnut into a police
station...heh..<br><br>
<br><br>
<br>
<blockquote type=cite class=cite cite><b>Do You Yahoo!?</b><br>
<a href="http://rd.yahoo.com/welcome/*http://fifaworldcup.yahoo.com/fc/en/spl">Sign-up
for Video Highlights</a> of 2002 FIFA World Cup
--0-340633384-1024371956=:50295 Content-Type: text/plain;
name=&quot;InterScan_SafeStamp.txt&quot; Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=&quot;InterScan_SafeStamp.txt&quot; ****** Message from
InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file
cisco_configmaker.exe contains: BKDR_SLACKBOT.C virus Attempted to clean
the file but it is not cleanable. It has been deleted. *****************
End of message *************** --0-340633384-1024371956=:50295--
</blockquote></html>

--=====================_126062460==_.ALT--


--------------InterScan_NT_MIME_Boundary--


home help back first fref pref prev next nref lref last post