Re: [Full-Disclosure] new virus: (fwd)

[Ron Clark <ron@xxxxxxxxxxxxxxxxxxxxx>]

---------- Forwarded message ----------
Date: Fri, 19 Sep 2003 18:22:00 +0300
From: Eero Volotinen <security@xxxxxxxx>
To: Ron Clark <ron@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [Full-Disclosure] new virus:

Yes, it's swan virus.

--
Eero

If you meant swen, this doesn't look like swen. Nothing mentioning
micro$oft

The test of the email is :
>
>Hi.
>I'm sorry to have to inform you that I wasn't able to deliver your
>message to the following addresses:
>
>
>
>Undelivered message to rlfblncx@xxxxxxxxxxx


 with an audio attachment

----- Original Message -----
From: "Ron Clark" <ron@xxxxxxxxxxxxxxxxxxxxx>
To: <full-disclosure@xxxxxxxxxx>
Sent: Friday, September 19, 2003 5:38 PM
Subject: [Full-Disclosure] new virus:


>
> Has anyone seen an email going around with subject bug message
> containing a supposed audio attachment that is really an exe named
> ckcwr.exe.
>
> Is this a possible new virus? I have recieved numerous cpoies of this
> email since last night.
>
> Ron Clark
> System Administrator
> Armstrong Atlantic State University
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html