Re: [Full-Disclosure] new virus: (fwd)

["Exibar" <exibar@xxxxxxxxxxx>]

it is the SWEN virus.  I've received dozens of them, McAfee picks it up as
Swen,  have no reason to doubt it :-)

 Exibar


----- Original Message ----- 
From: "Ron Clark" <ron@xxxxxxxxxxxxxxxxxxxxx>
To: <full-disclosure@xxxxxxxxxx>
Sent: Friday, September 19, 2003 11:43 AM
Subject: Re: [Full-Disclosure] new virus: (fwd)


>
>
> ---------- Forwarded message ----------
> Date: Fri, 19 Sep 2003 18:22:00 +0300
> From: Eero Volotinen <security@xxxxxxxx>
> To: Ron Clark <ron@xxxxxxxxxxxxxxxxxxxxx>
> Subject: Re: [Full-Disclosure] new virus:
>
> Yes, it's swan virus.
>
> --
> Eero
>
> If you meant swen, this doesn't look like swen. Nothing mentioning
> micro$oft
>
> The test of the email is :
> >
> >Hi.
> >I'm sorry to have to inform you that I wasn't able to deliver your
> >message to the following addresses:
> >
> >
> >
> >Undelivered message to rlfblncx@xxxxxxxxxxx
>
>
>  with an audio attachment
>
> ----- Original Message -----
> From: "Ron Clark" <ron@xxxxxxxxxxxxxxxxxxxxx>
> To: <full-disclosure@xxxxxxxxxx>
> Sent: Friday, September 19, 2003 5:38 PM
> Subject: [Full-Disclosure] new virus:
>
>
> >
> > Has anyone seen an email going around with subject bug message
> > containing a supposed audio attachment that is really an exe named
> > ckcwr.exe.
> >
> > Is this a possible new virus? I have recieved numerous cpoies of this
> > email since last night.
> >
> > Ron Clark
> > System Administrator
> > Armstrong Atlantic State University
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> >
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html