From: Scott Morris (swm@emanon.com)
Date: Fri Mar 05 2004 - 11:51:13 GMT-3
It's a virus. Spoofed. Not pretty, but whaddya do. Gets past many of the
virus gateways because the ZIP is password protected. Kinda fun. Social
engineering and malicious code all rolled into one!
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, CISSP,
JNCIS, et al.
IPExpert CCIE Program Manager
IPExpert Sr. Technical Instructor
swm@emanon.com/smorris@ipexpert.net
http://www.ipexpert.net
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Bola
Adegbonmire
Sent: Friday, March 05, 2004 9:34 AM
To: ccielab@groupstudy.com
Subject: Real or Russe
Hi All,
Any one got this message too? I suspect it is a virus and will not be
responding. Any confirmation.
Rgds,
Bola
Date:Fri, 05 Mar 2004 09:32:55 -0500To:ccielab@groupstudy.comSubject:E-mail
account disabling warning.From:administration@groupstudy.com Add to Address
Book [input] [input] [input] [input]
Dear user, the management of Groupstudy.com mailing system wants to let
you know that,Our main mailing server will be temporary unavaible for
next two days, to continue receiving mail in these days you have to
configure our freeauto-forwarding service.For details see the attach.In
order to read the attach you have to use the following password: 15374.The
Management, The Groupstudy.com team
http://www.groupstudy.com[GroupStudy removed an attachment of type
application/octet-stream which had a name of Attach.zip]
---------------------------------
Do you Yahoo!?
Yahoo! Search - Find what youre looking for faster.
This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:14 GMT-3