[48800] in North American Network Operators' Group
Viri capture...
daemon@ATHENA.MIT.EDU (blitz)
Tue Jun 18 03:17:47 2002
Date: Tue, 18 Jun 2002 03:17:07 -0400
To: nanog@trapdoor.merit.edu
From: blitz <blitz@macronet.net>
In-Reply-To: <20020618034556.54382.qmail@web21109.mail.yahoo.com>
Errors-To: owner-nanog-outgoing@merit.edu
--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
boundary="=====================_126062460==_.ALT"
--=====================_126062460==_.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed
Anti-viri worked here as well....file captured, and destroyed... backdoor
bot indeed...
At 20:45 6/17/02 -0700, you wrote:
>I send you this file for your advice.
A more incriminating leader, you couldn't of picked...
Its nice when things actually WORK right....
What a waste of all our time....like no one here knows about anti-viri
protection....like rolling a glazed doughnut into a police station...heh..
>Do You Yahoo!?
><http://rd.yahoo.com/welcome/*http://fifaworldcup.yahoo.com/fc/en/spl>Sign-up
>for Video Highlights of 2002 FIFA World Cup
>--0-340633384-1024371956=:50295 Content-Type: text/plain;
>name="InterScan_SafeStamp.txt" Content-Transfer-Encoding: 7bit
>Content-Disposition: attachment; filename="InterScan_SafeStamp.txt" ******
>Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached
>file cisco_configmaker.exe contains: BKDR_SLACKBOT.C virus Attempted to
>clean the file but it is not cleanable. It has been deleted.
>***************** End of message ***************
>--0-340633384-1024371956=:50295--
--=====================_126062460==_.ALT
Content-Type: text/html; charset="us-ascii"
<html>
Anti-viri worked here as well....file captured, and destroyed... backdoor
bot indeed...<br><br>
<br>
At 20:45 6/17/02 -0700, you wrote:<br><br>
<blockquote type=cite class=cite cite>I send you this file for your
advice.</blockquote><br>
A more incriminating leader, you couldn't of picked...<br>
Its nice when things actually WORK right....<br>
What a waste of all our time....like no one here knows about anti-viri
protection....like rolling a glazed doughnut into a police
station...heh..<br><br>
<br><br>
<br>
<blockquote type=cite class=cite cite><b>Do You Yahoo!?</b><br>
<a href="http://rd.yahoo.com/welcome/*http://fifaworldcup.yahoo.com/fc/en/spl">Sign-up
for Video Highlights</a> of 2002 FIFA World Cup
--0-340633384-1024371956=:50295 Content-Type: text/plain;
name="InterScan_SafeStamp.txt" Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="InterScan_SafeStamp.txt" ****** Message from
InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file
cisco_configmaker.exe contains: BKDR_SLACKBOT.C virus Attempted to clean
the file but it is not cleanable. It has been deleted. *****************
End of message *************** --0-340633384-1024371956=:50295--
</blockquote></html>
--=====================_126062460==_.ALT--
--------------InterScan_NT_MIME_Boundary--