[66391] in North American Network Operators' Group
RE: interesting new virus, maybe???
daemon@ATHENA.MIT.EDU (Brennan_Murphy@NAI.com)
Fri Jan 9 14:25:44 2004
Date: Fri, 9 Jan 2004 11:16:10 -0800
From: <Brennan_Murphy@NAI.com>
To: <scott@wworks.net>, <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
Send it in to AVERT. It's free analysis and will give you
recommendations for how to deal with it:
https://www.webimmune.net/default.asp
...does require registration but again, it's free.
or email it in per instructions here:
http://vil.nai.com/vil/submit-sample.asp
other vendors may have similar mechanisms.
-----Original Message-----
From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of
Scott Granados
Sent: Friday, January 09, 2004 12:43 PM
To: nanog@merit.edu
Subject: interesting new virus, maybe???
I'm not sure if anyone has seen this or if its just to early but.
While opening mail, <not with a microsoft outlook product> I found=20
something which looked different. The message was from pgp-public-key
and=20
said "Here is my key". When you look at the attachment its called=20
youremail.doc.com obviously something meant to be executed. What struck
me as different from the top was it wasn't from a support@microsoft or=20
some such address it specifically mentioned pgp_public_key. Also, I=20
obviously didn't try to run the code or do anything with it, it is 76 K
in=20
size and again called youremail.doc.com.
I haven't tried a virus scanner against it yet but will later.
Thanks
Scott
