[Esd-l] xmascottage.shs

Brett Glass brett at lariat.org
Sun Dec 23 11:57:01 PST 2001

I can't tell if it's the same, as I've never seen an attachment
with that name. It certainly *could* be a Christmas worm.


At 12:53 PM 12/23/2001, Simon Matthews wrote:
>I have seen one copy of an email with the rather unusual attachment name 'scrap.shs'. It purports to be a Christmas greeting "Subject: Merry Christmas".
>Is this the same?
>At 12:24 PM 12/23/01 -0700, Brett Glass wrote:
>>We're seeing (and blocking!) mass mailings of a file with the name xmascottage.shs. The messages bearing this attachment are always addressed to many people at once and never seem to have text -- just the attachment. To paraphrase an old Christmas song, "What worm is this...?"
>>Esd-l mailing list
>>Esd-l at spconnect.com

More information about the esd-l mailing list