Re: [SkunkworksAMA] Hi

From: ShujinTribble <tribble_at_buffnet.net>
Date: Sat, 07 Aug 2004 10:41:48 -0400

. wrote:

>>this is a virus

> It most certainly is.. I just ran through and checked my system, it's
> clean, near as i can tell. I think it just spoofs a recently used
> address. :P

Yup.. typical.

> It would have to have been sent out through a mail program of mine, and
> there's no record of that one ever going out.

Not to worry - these things typically use an internal SMTP engine
anyway, PLUS some of the more recent ones are using Yahoo's own search
system to find new addresses to spoof / send to.

Just for info, folks, that virus was: ZIP.Mabutu
According to the worm's info......
"--the worm also retrieves the MSN Messenger contact list...."
"--announces its presence to an IRC server, and provides limited
backdoor functions...."

If anyone needs / wants links to Antivirus scanners, spyware removes,
other web browsers, etc... Please hit the database section
( http://groups.yahoo.com/group/SkunkworksAMA/database )
And feel free to use the list there to keep yourself safe.

(Hey, I do this stuff for a living.)
-- 
Shujin Tribble
It's a shame FreeBSD, Linux, Mac, and Amiga can't run
some of the most popular Windows applications:
Nimda, CodeRed, Klez, Swen, SoBig, ILOVEYOU, MyDoom,
Bagle, Netsky, sober, Mimail, Dumaru......
Embrace Open Source and starve the beast!
Mozilla - www.mozilla.org | Open Office - www.openoffice.org
This is just sad: http://support.microsoft.com/?kbid=111601
Received on Sat Aug 07 2004 - 19:20:11 CDT

This archive was generated by hypermail 2.3.1 : Sat Nov 30 2019 - 17:51:54 CST