[Esa-l] Looks like another new one
jbettes at gwstudio.com
Mon Feb 19 09:35:25 PST 2001
Yup, it sure is , it actually says so in the script,
>rem "Plan Colombia" virus v1.0=0A=
>rem by Sand Ja9e Gr0w (www.colombia.com)=0A=
>rem Dedicated to all the people that want to be hackers or crackers, in =
>rem This program is also a protest act against the violence and =
>corruption that Colombia lives...=0A=
>rem I always wanting that all this finishes, I have said...=0A=
Guess I should have read the script to find out what it was...never seen
the ones that change the name of the attachment.
At 09:58 AM 2/19/01 -0700, Brett Glass wrote:
>Isn't it "Plan Colombia" that generates filenames and subjects
>At 09:25 AM 2/19/2001, Jeff Bettes wrote:
> >Just looking at my trapped notices and got one Sunday night
> >>REPORT: Trapped poisoned executable "BEGOIOF.GIF.vbs"
> >>REPORT: Not a document, or already poisoned by filename. Not scanned
> for macros.
> >>STATUS: Message quarantined in /var/mail/quarantine, not delivered to
> >>Subject: HUGETI
> >Can't find any info on the usual virus sites, anyone heard of this one.
> >As usual, the scanner comes thru again...thanks John,
> >Jeff Bettes
> >Grace & Wild Inc.
> >jbettes at gwstudio.com
> >E-mail Security Announce list mailing list
> >E-mail Security Announce list at spconnect.com
More information about the esd-l