[Esa-l]What's this? (Take care if you run the attachment; probable malware)

Brett Glass brett at lariat.org
Tue May 8 01:58:55 PDT 2001

I know what RNAAPP.EXE in Windows is and what it does. That's why I
am concerned; no one would actually ever send out copies of it.

I ran the file past McAfee, and it matches the signature for
Magistr/32. Perhaps this is a variant that selects executable
names and icons from your hard drive and sends itself out with


At 01:33 PM 5/8/2001, Graham Dunn wrote:
>"RNAAPP (Remote Network Access Application) is a core executable for
>Microsoft Windows Dial-Up Networking."
>On Tue, May 08, 2001 at 05:02:16AM +0000, Brett Glass wrote:
>> Just got this in my box. Trojan, worm, or what?
>> --Brett
>> [demime 0.98d removed an attachment of type application/octet-stream which had a name of RNAAPP.9049DEFANGED-EXE]
>> _______________________________________________
>> E-mail Security Announce list mailing list
>> E-mail Security Announce list at spconnect.com
>> http://www.spconnect.com/mailman/listinfo/esa-l
>  gdunn at inscriber.com     Graham Dunn         || ||| | ||| |||| | |||| | 
>E-mail Security Announce list mailing list
>E-mail Security Announce list at spconnect.com

More information about the esd-l mailing list