Re: [Full-disclosure] patch-9449

[mis@xxxxxxxxxx]

see

http://www.symantec.com/outbreak/spam-attack-zipped-trojan.html


On Thu, Apr 12, 2007 at 08:13:35PM -0500, Matti Ranta wrote:
> can you send it so we can dissect it?
> 
> thank you
> 
> On 4/12/07, Steward Smith <fulldisc@xxxxxxxxx> wrote:
> > Hi,
> >
> > Had a funny spam today that warned about mails coming from my IP address
> > and I should apply the attached patch. The filename was named
> > patch-9449.exe which was attached in a password protected zip file -
> > presumably to fool your virus scanner.
> >
> > I unpacked it but my up-to-date virus scanner on my Windows XP vmware
> > instance cannot detect any malware.
> >
> > Has anyone else seen this and know what it is?
> >
> > Stew
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
> 
> 
> -- 
> Matti Ranta
> 
> This e-mail and any attachments may contain confidential and privileged
> information. If you are not the intended recipient, please notify the
> sender immediately by return e-mail, delete this e-mail and destroy any
> copies. Any dissemination or use of this information by a person other
> than the intended recipient is unauthorized and may be illegal.
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/